i have a csv file with header column"Name","CapacityGB","FreeSpaceGB" with the line number 1.
This header is also coming along with the next line as one single event:
I have used the below props.conf:
INDEXED_EXTRACTIONS = CSV
DATETIME_CONFIG = CURRENT
NO_BINARY_CHECK = true
SHOULD_LINEMERGE = true
MUST_BREAK_AFTER = (\,\"\d+.\d+\"$)
Please let me know how to exclude the header file.
Do i have to update anything on props.conf?
you may want to add the following in your props.conf your sourcetype to try and exclude the header being added to events.
have a look at this, and make sure you set this on your forwarder.