I have a CSV file placed in a UF and the CSV data is as follows '"Name" "userid" "use location" "userdesignation"' Raj raj-123 Argentina Consultant  Now  I have written props and transforms as below but still the header is being ingested    Props: [Sourcetype] Should_linemerge=false  Line_Breaker=([\r\n]+) NO_BINARY_CHECK=true  CHARSET= UTF-8  INDEXED_EXTRACTIONS=CSV  category=structured  description=Comma-separated value format. Set header and other settings in "Delimited Settings" disabled=false TRUNCATE=99999 DATETIME_CONFIG=CURRENT KV_MODE=none  HEADER_FIELD_LINE_NUMBER=1  TRANSFORMS-set=setnull      Transforms.conf  [setnull] REGEX=(^"NAME".*$) |(^\'\"NAME\".$) DEST_KEY=queue  FORMAT=nullQueue  Please let me know what changes has to be made so that header is not being ingested                                      ... View more

Hi all. I am ingesting a CSV file from a UF where the CSV is daily updated by the app team at a particular time and  I have seen data in splunk ingesting on hourly basis which should not be the case and it should be ingesting only once per day need suggestions on how to eliminate this and make sure the data is ingesting only once per day         ... View more

Hi I would like to know the list of users logging in from which region/ip ... View more