Splunk Search

How can I find out the length of a line in a log file?

approachct
Path Finder

We have a CSV file that we import into splunk daily. We have at least one line that is too long and is possibly corrupted. How can I find out the maximum line length of a raw event in the CSV. That is to say, the length of the full line, not the length of the individual fields in the CSV.

Tags (2)
0 Karma

southeringtonp
Motivator

Assuming single-line events, eval can do it:

| eval line_length=len(_raw)
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...

Auto-Injector for Everything Else: Making OpenTelemetry Truly Universal

You might have seen Splunk’s recent announcement about donating the OpenTelemetry Injector to the ...