Splunk Search

Is it possible to use lookup tables that don't have a header row?


I'm working with a number of files in a CSV comma delimited format that don't contain header rows. Is it possible to manually assign field values to that lookup table?



Tags (1)
0 Karma

Splunk Employee
Splunk Employee

No, unfortunately that's not possible. You will have to manually add the header row to the lookup table files themselves.

Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.