Splunk Search

InputCsv not working

Tim
Explorer

Has anyone had issues using InputCsv? I created a CSV files using the 'outputcsv x' on a small event set. I verified the CSV file exists and is well-formed. Unfortunately 'inputcsv x' or 'inputcsv x.csv' doesn't return anything.

I've tried from both the UI and the command-line - both with the same result.

Tags (1)
0 Karma

ImanIself
Explorer

You can try to put a pipe symbol prior to the search on the UI. For example:

| inputcsv rrcidrlist

returns my data correctly however:

inputcsv rrcidrlist

returns nothing. I have noticed that some commands need a pipe in front. Perhaps someone can explain this better?

0 Karma

ftk
Motivator

Can you please post the example search you are using, as well as any config entries you have created for this lookup, and the location of your csv file. Thanks

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...