Splunk Enterprise

Splunk Add-on for AWS - Ingesting csv files and he fields are not getting extracted at all

izzie123
Path Finder

Hello,

We are ingesting csv files from a S3 bucket using the Custom SQS based S3 input.

Although, the data is pulled rightly, the fields are not getting extracted properly. The header line has been ingested as a different event and the header fields are not getting extracted.

I have defined the Indexed_Extractions=csv in the props.conf

Is there any other way to extract a csv file from the S3 bucket? Any work around?

 

Labels (3)
Get Updates on the Splunk Community!

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Community Feedback

We Want to Hear from You! Share Your Feedback on the Splunk Community   The Splunk Community is built for you ...

Manual Instrumentation with Splunk Observability Cloud: Implementing the ...

In our observability journey so far, we've built comprehensive instrumentation for our Worms in Space ...