CSV files generated from Outputlookupand Outputcsv cant be re-used as input.

[harishy100]

I used a search query to get a value.

source="nfr-output_300_1.csv" host="IHTNW754752GG-L" index="main" sourcetype="csv"
 | eval end= strptime(End_time,"%Y-%m-%d %H:%M:%S")
 | eval start= strptime(Start_Time,"%Y-%m-%d %H:%M:%S")
 | eval diff= end-start
 | stats sum(diff) as Total_Time
 | eval Total_Time = Total_Time/3600
 | outputlookup test11.csv

I am trying to re-use it as input and I tried to add it through "Add Data" option in Splunk. It isnt recognizing the Total_Time column. How can I make sure to use this csv again?

[mayurr98]

I did not understand your query.Your Total_Time column is in test11.csv.
you can view that column by running this command.

| inputlookup test11.csv

let me know if this helps!