I'm setting up a CSV file for import and analysis, and when I do I get the following error:
SyntaxError: Unexpected token <
Not sure what's causing this - I've tried converting the file to Unix format but that didn't work.
I'm using the standard "Add Data" functionality on the UI and I'm having Splunk figure out that this is a CSV file with headers, but to no avail.
Alright, I have found the problem. The partition of my server for / was full.
So when trying to upload the csv file (roughtly 1Mo), splunk first tries to copy it to /tmp (I guess) and fail.
Using scp and copying the lookup file directly in the good folder did the trick.
Unfortunately the error message given by splunk isn't very helpfull.
Hopes that helps
I am having the same problem when trying to import a 2Mo csv lookup table:
SyntaxError: Unexpected token <
Doesn't look likes its related to encoding (UTF-8 without BOM), any clue?
btw I am using splunk 4.2