FYI, Release 6.1.0 of the AWS Add-on that was released on 11th July 2022 resolves this issue: Release notes for the Splunk Add-on for AWS - Splunk Documentation New features Version 6.1.0 of the Splunk Add-on for AWS version contains the following new and changed features: Support for the parsing of CSV files from AWS S3 (Generic S3 and SQS-based S3 ingestion methods) https://docs.splunk.com/Documentation/AddOns/released/AWS/Releasenotes#New_features ... View more

Are there any updates on the issue? I recently setup an environment to test ingesting files from an S3 bucket using the SQS-based S3 input and noticed the header of the CSV file was ingested as an event and the remaining actual events didn't have any field extraction applied. ... View more