Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Stripping header from input file

$
0
0

Is there a way to strip the header from a data input? This is coming from a universal forwarder

example

this is garbage this is also garbage end of garbage HEADER DB_NAME DB_ID IO timestamp test_db 1 100000 .. timestamp last_db 10 500000

I want to not index the first 4 lines (3 starting with > and the column heading line)


Viewing all articles
Browse latest Browse all 13053

Trending Articles