About amitkr0201

amitkr0201 · ‎01-13-2015

I'm extracting a CSV and sending it over email. The extracted CSV sometimes contains lines whose length is greater than 990 characters (including commas, quotes etc. in csv). In the received CSV lines with length > 990 characters are broken and a "!\r\n" (exclamation followed by line break) is being inserted at character #991. This renders the CSV un-parsable by, say, excel. Has anyone run into similar problem and found a solution for this. I've gone through limits.conf and I'm not able to locate any relevant setting in it. PS: I do not have an option to reduce the number of characters in a line.

amitkr0201 · ‎07-03-2014

/opt/splunk/etc/system/default/inputs.conf Any customization to this file might be overwritten if splunk is upgraded. Better stick changes in /opt/splunk/etc/system/local/inputs.conf only

amitkr0201 · ‎06-30-2014

crcSalt = <SOURCE> should help you. More about that here

amitkr0201 · ‎06-30-2014

You can use transaction for this. e.g. for calculating timediff between A & B, you can use something like ...|transaction SessionHandle startswith="SessionEvent=A" endswith="SessionEvent=B"

amitkr0201 · ‎06-23-2014

You can solve your problem in two step process: 1. Extract full user agent. A simple rex command or an entry in props.conf will do. Something similar to "\"(?P<UserAgent>[^\"]+)\"". 2. Use a python script to extract detailed data from user agent string. An example of such script: https://github.com/JustinAzoff/splunk-scripts/blob/master/ua2os.py Keep in mind that the python script linked might not be up to date and you might need to make additions to it for newer browsers/OS etc.

amitkr0201 · ‎06-13-2014

Sounds promising I'll try it out. Thanks

amitkr0201 · ‎06-13-2014

Is there an app/script/something else available which compresses a csv (preferably output of outputcsv command ) and emails it? Bonus point if its able to split it into multiple zips if size exceeds threshold. I am working on a set of data which, when extracted as CSV, sizes to approx 150 MB, which when compressed is >10 MB. The email provider I use allows max 8 MB attachments, so I need compression as well as splitting into multiple zip. EDIT: Platform = Unix

Posts	7
Solutions	0
Karma Given	2
Karma Received	1
Member Since	‎11-20-2012

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

Why an extracted CSV sent over email is line break...

How to compress CSV file and email it on Unix plat...

Why an extracted CSV sent over email is line break...

Re: csv files are not getting indexed

Re: csv files are not getting indexed

Re: calculate duration between multiple events fro...

Re: Syslog extract browser type field

Re: How to compress CSV file and email it on Unix ...

How to compress CSV file and email it on Unix plat...