Getting Data In

how can i ignore the last line from the csv file while indexing from the universal forwarder ??

Nadhiyaa
Path Finder

how to tell my universal forwarder to ignore the last line from the CSV during parsing

Tags (1)
0 Karma

whrg
Motivator

I'm not aware of an option to specifically ignore the last line of a CSV file. However, you can filter events on your Heavy Forwarder/Indexer based on a regex. See Router and filter data. How does the last line differ from the other lines? Perhaps you could post some sample data.

0 Karma
Get Updates on the Splunk Community!

New This Month in Splunk Observability Cloud - Metrics Usage Analytics, Enhanced K8s ...

The latest enhancements across the Splunk Observability portfolio deliver greater flexibility, better data and ...

Alerting Best Practices: How to Create Good Detectors

At their best, detectors and the alerts they trigger notify teams when applications aren’t performing as ...

Discover Powerful New Features in Splunk Cloud Platform: Enhanced Analytics, ...

Hey Splunky people! We are excited to share the latest updates in Splunk Cloud Platform 9.3.2408. In this ...