Splunk Enterprise

Splunk Add-on for AWS - Ingesting csv files and he fields are not getting extracted at all

izzie123
Path Finder

Hello,

We are ingesting csv files from a S3 bucket using the Custom SQS based S3 input.

Although, the data is pulled rightly, the fields are not getting extracted properly. The header line has been ingested as a different event and the header fields are not getting extracted.

I have defined the Indexed_Extractions=csv in the props.conf

Is there any other way to extract a csv file from the S3 bucket? Any work around?

 

Labels (3)
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...