Display row numbers in output

[efelder0]

I am indexing a CSV file into Splunk and wish to display the row number in a seperate column called 'row count'.

Example:

Field 1 Field 2 Row Count Field 3
blah blah 1 blah
blah blah 2 blah
blah blah 3 blah

What is the best method to achieve this?

Thanks.

[sanderdenheijer]

Add ... | streamstats count as "Row Count" to your search

[efelder0]

Would displayRowNumbers work here? If so, how would it be configured in my search query?

[MuS]

Hi efelder0,

you can set this in viewstates.conf or in your XML with this option:

<option name="displayRowNumbers">true</option>

This will work in the recent Splunk releases.

[wrangler2x]

Adding to /opt/splunk/etc/apps/search/local/viewstates.conf does not seem to do anything in the search app.