I am working with eventgen. I have my eventgen.conf file and some sample files. I am working with the toke and regex commands in the eventgen.conf. I can get all commands to work except mvfile. I tried several ways to create the sample file but eventgen will not read the file and kicks errors such as file doesn't exist or "0 columns". I created a file with a single line of items separated by a comma and still no go. If i create a file with a single item in it whether it be a word or number, eventgen will find it and add it to the search results. If i change it to mvfile and use :1, it will not read the same file and will kick an error. Anyone please give me some guidance on why the mvfile doesn't work. Any help would be greatly appreciated. Search will pull results from (random, file, timestamp) commands, just not mvfile snip from eventgen.conf "token.4.token = nodeIP=(\w+) token.4.replacementType = mvfile token.4.replacement = $SPLUNK_HOME/etc/apps/SA-Eventgen/samples/nodename.sample:2" snip from nodename.sample host01,10.11.0.1 host02,10.12.0.2 host03,10.13.0.3 Infrastructure ubuntu server 24.04 Splunk 9.4.3 eventgen 8.2.0   I have tried to create a file from scratch with Notepad++, notepad, excel, and directly on the linux server in the samples folder.  I have validated that file as a csv file with "goteleport" and "csvlint" sites ... View more