Scheduled Reporting is Giving me Unwanted Columns

Follow

Gerald Saldi

• May 15, 2019 04:25

I have inserted a search inquiry which would remove the _raw data however the Column Headers still exist in the csv file.

I tried the query but does not remove these fields at all in the final report.

| fields - _raw, _sourcename, _sourcehost, _sourcecategory, _source

 

 

 

How do I remove them? Any thoughts?

0

• 

  Gerald Saldi

  • May 15, 2019 04:43

  Also, even though I set the preferences into DD/MM/YYY, the results seen are the ones above.

  0

  Comment actions Permalink

Please sign in to leave a comment.