Hello splunk community, I'm a newbie on splunk so i this maybe a basic question. Basically I'm trying to do a piechart containing all the processes currently running. I managed (via powershell script) to generate a csv file containing this: "Values","Count","Group","Name" "System.Collections.ArrayList","1","System.Collections.ObjectModel.Collection`1[System.Management.Automation.PSObject]","ApplicationFrameHost" "System.Collections.ArrayList","1","System.Collections.ObjectModel.Collection`1[System.Management.Automation.PSObject]","conhost" "System.Collections.ArrayList","3","System.Collections.ObjectModel.Collection`1[System.Management.Automation.PSObject]","csrss" "System.Collections.ArrayList","1","System.Collections.ObjectModel.Collection`1[System.Management.Automation.PSObject]","dllhost" ........ ......... When forwarded, splunk couldn't find fields associated with the file, even when i tried to extract fields manually, splunk confused field name with data. (Objective: Pie chart containing the name of process and the number of its processes.)
... View more