csv

Overview

Takes in an Event and parses its CSV data into columns.

OptionRequiredTypeDescription
sourceNoStringThe field in the Event that will be parsed. Default is message.
quote_characterNoStringThe character used as a text qualifier for a single column of data. Default is double quote .
delimiterNoStringThe character separating each column. Default is ,.
delete_headerNoBooleanIf specified, the header on the Event (column_names_source_key) deletes after the event is parsed. If there’s no header on the event, no actions is taken. Default is true.
column_names_source_keyNoStringThe field in the Event that specifies the CSV column names, which will be autodetected. If there must be extra column names, the column names autogenerate according to their index. If column_names is also defined, the header in column_names_source_key can also be used to generate the event fields. If too few columns are specified in this field, the remaining column names autogenerate. If too many column names are specified in this field, the CSV processor omits the extra column names.
column_namesNoListUser-specified names for the CSV columns. Default is [column1, column2, …, columnN] if there are N columns of data in the CSV record and column_names_source_key is not defined. If column_names_source_key is defined, the header in column_names_source_key generates the Event fields. If too few columns are specified in this field, the remaining column names will autogenerate. If too many column names are specified in this field, CSV processor omits the extra column names.