Knowledge Management

Why AppInspect tool Fails check_lookup_files check?

kamlesh_vaghela
SplunkTrust
SplunkTrust

Hello Splunkers,

My app has a static lookup my_lookup.csv with static data.

This is my sample csv data which cause a failure.

FieldOne,FieldTwo,FieldThree
DataOne,DataTwo ,"Data Three with double quotes & commas, such as this=""Hi@Im.in "", that=""Hi@You.in"". "

I got AppInspect below failures.

check_lookup_files check_lookup_csv_is_valid

check_lookup_files.py
This .csv lookup is not formatted as valid csv. Details: The number of columns in row 2 (=4 columns) does not match the number of columns in the csv's header (=3 columns). The header is considered row 1. Please edit/remove this lookup. File: lookups/my_lookup.csv

Question: My csv file is proper with 3 header (=3 columns) with proper data.Then why AppInspect considering =4 columns ? Is it bug in AppInspect? Or I have to handle this scenario in different way.

Thanks
Kamlesh

Tags (1)

tpavlik_splunk
Splunk Employee
Splunk Employee

Kamlesh - thank you for catching this! Indeed it appears that your sample CSV is recognized and parsed correctly by Splunk's inputlookup command so this AppInspect check is at fault. We have filed a bug and hope to align our parsing of CSV files with the inputlookup implementation. For now please ignore this check failure.

kamlesh_vaghela
SplunkTrust
SplunkTrust

Hi @tpavlik_splunk,

Thanks for the reply.
Yeah, I felt that was the bug.

And yes, it will be OK if this failure would be in my "Good To Have" list.
:)

Can you please let me know the possibility to scope this bug in next release of AppInspect tool?

Thanks

0 Karma

tpavlik_splunk
Splunk Employee
Splunk Employee

Kamlesh, I can't guarantee it will be in our next release but it is in our backlog and we should be able to address it in the coming weeks. Thanks again for identifying the issue.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...