Splunk Search

InputCsv not working

Tim
Explorer

Has anyone had issues using InputCsv? I created a CSV files using the 'outputcsv x' on a small event set. I verified the CSV file exists and is well-formed. Unfortunately 'inputcsv x' or 'inputcsv x.csv' doesn't return anything.

I've tried from both the UI and the command-line - both with the same result.

Tags (1)
0 Karma

ImanIself
Explorer

You can try to put a pipe symbol prior to the search on the UI. For example:

| inputcsv rrcidrlist

returns my data correctly however:

inputcsv rrcidrlist

returns nothing. I have noticed that some commands need a pipe in front. Perhaps someone can explain this better?

0 Karma

ftk
Motivator

Can you please post the example search you are using, as well as any config entries you have created for this lookup, and the location of your csv file. Thanks

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...