Hi @gcusello  I can delete the top line out before I send it to Splunk, as the Search is easier to understand and looks nicer. So in the Field Data I only have the Values without the Header. My Question is, this | rex field=Data "\"(?<Name>[^\"]*)\",\"(?<Website>[^\"]*)\",\"(?<Country>[^\"]*)\"" Only reads out the first line. The thing is, that when I write the values from the csv-File into a Log-File, it adds all rows together so if it was: Line 1 Line 2 Line 3 In the Log it will be: Line 1 Line 2 Line 3 So if I have this in the CSV "Thomas","thomas.com","England" "Luca","luca.com","USA" In the Log-File and therefore also in the Field of the event it looks like this: "Thomas","thomas.com","England" "Luca","luca.com","USA" Now my Question was, if it is possible to make a table with only one Event, which has all Lines in it and if yes, how do the Lines have to be Formatted in the Log and how does the rex look like to show it like this: (Here I made 2 Events, for every line a sepearate Event)   ... View more

Hi @gcusello  Okay  it worked, thanks! I now used different attributes for testing the Search: Name, Website, Country The log is read by Splunk without making a new line which means the csv that looked like this: "Thomas","thomas.com","England" "Luca","luca.com","USA" Looks like this in Splunk: "Thomas","thomas.com","England" "Luca","luca.com","USA" So the Search is showing the Table with the first line only: How do I have to configure the log input or the splunk search so it lists every line?   ... View more

Hi @gcusello  Thanks for your Help! The Event looks like this:   ... View more

Hi @gcusello  Somehow it is still not working. It is not showing the results in the table:   ... View more

Hi @gcusello  Thats perfect thank you! Now the string with that Information is in the Field "Data" From the Event: How do you tell the rex where the information to filter is? ... View more

Hi @gcusello, I can't do that, as I work in a large Company and dont have the rights to do that. Isn't it possible to do that with a Splunk Search? If not it would also be possible for me to write every row into a seperate log-file if its possible that way. ... View more