Reporting

OUTPUTCSV -- No Quotes Please

vragosta
Path Finder

OUTPUTCSV is currently appending search results surrounded in quotes, like "1.1.1.1."

Is it possible for OUTPUTCSV to NOT surround the output in quotes?

Thanks!

Tags (1)

MuS
SplunkTrust
SplunkTrust

Hi vragosta,

no, this is probably done to handle any non-alphanumeric character correct. See this answer http://answers.splunk.com/answers/114632/when-does-splunk-add-double-quotation-in-outputcsv.html for more details.

cheers, Mus

0 Karma

MuS
SplunkTrust
SplunkTrust

or use a simple trim after the lookup?

... | head 1 | eval foo="\"quotes\"" | eval boo=trim(foo, "\"") | table foo boo
0 Karma

jeffreygaraygay
Explorer

Hello, were you able to get your issue with outputcsv having csv output in quotes resolved?

Thanks,
Jeff

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.