Events-csv User Manual

Internal

• events-csv

Overview

"csv" assumes that the input file or piped content is text comma-separated content and parses it, generating events, which then are optionally filtered by the query and processed depending on the command specified on command line.

csv [command] [query] <input-file.csv>

The default command, which does not need to be specified on the command line, is output: the CSV content is parsed and the resulted events are optionally filtered and displayed at stdout:

csv [query] [-o output-spec] <input-file.csv>

Alternatively, the content can be sent into "csv" with a pipe:

tail -f input.csv | csv [command] [query]

Concepts

events-csv Concepts

Commands

output

This is the default command, and does not need to be specified on the command line:

output

headers

Scan the CSV stream and display the headers, as they are identified in the stream. The command displays the number of the line on which the header is found, and then, for each header:

• the index that can be used to access the value that corresponds the header in a data lines. The index can be used for index-based output
• the header name
• the header type
• optionally, the header format

csv headers ./sample.csv

line 1 header:
  1: timestamp(time:MM/dd/yy HH:mm:ss)
  2: CPU User Time(string)
  3: CPU Kernel Time(string)
  4: CPU I/O Wait Time(string)