Splunk Search

InputCsv not working

Tim
Explorer

Has anyone had issues using InputCsv? I created a CSV files using the 'outputcsv x' on a small event set. I verified the CSV file exists and is well-formed. Unfortunately 'inputcsv x' or 'inputcsv x.csv' doesn't return anything.

I've tried from both the UI and the command-line - both with the same result.

Tags (1)
0 Karma

ImanIself
Explorer

You can try to put a pipe symbol prior to the search on the UI. For example:

| inputcsv rrcidrlist

returns my data correctly however:

inputcsv rrcidrlist

returns nothing. I have noticed that some commands need a pipe in front. Perhaps someone can explain this better?

0 Karma

ftk
Motivator

Can you please post the example search you are using, as well as any config entries you have created for this lookup, and the location of your csv file. Thanks

0 Karma
Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...