×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
srsava
New Member
Member since: ‎04-19-2011
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎04-19-2011
Activity Feed
Topics I've Started
View All

Re: Removing CSV Header from Indexing

by in Getting Data In
‎07-19-2011 01:58 PM
‎07-19-2011 01:58 PM
Thanks for your help, Although this WILL remove the Header after it is indexed, I have hundreds of CSV files I am collecting and will be indexing for this project. Can someone explain the method to remove the CSV header from being published as an event? Why does splunk assign a datetime to the CSV header?...based off the datetime the file was created? I would like to configure the Splunk instance to monitor a file location for any changes and NOT publish the CSV header as an event. I do not want to have to delete each CSV Header instance as they are indexed or perhaps re-indexed. ... View more

Removing CSV Header from Indexing

by in Getting Data In
‎07-18-2011 12:40 PM
‎07-18-2011 12:40 PM
Hello Splunk Community, I uploaded custom CSV files to Splunk for indexing. The CSV Header for each file is being indexed with a time stamp for the day the file is uploaded. I do not want the CSV Header returned in the results. I have looked through the answer.splunk knowledge base and attempted to configure the props.conf and transforms.conf as suggested by other users. I am not achieving the results I desire. I am still indexing the CSV Header as an event when the Header should just be ignored. My Headers include Number, Date Time, Service, Source Port, Source, Destination, Protocol Please help if possible. ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:02 AM