Skip to main content
Version: v4.23

xsv

Reads and writes lines with separated values.

Synopsis

Parser:

csv [--list-sep <list-sep>] [--null-value <null-value>]
[--allow-comments] [--auto-expand] [--header <header>]
[--schema <schema>] [--selector <fieldname[:prefix]>]
[--schema-only] [--raw] [--unnest-separator <separator>]
ssv [--list-sep <list-sep>] [--null-value <null-value>]
[--allow-comments] [--auto-expand] [--header <header>]
[--schema <schema>] [--selector <fieldname[:prefix]>]
[--schema-only] [--raw] [--unnest-separator <separator>]
tsv [--list-sep <list-sep>] [--null-value <null-value>]
[--allow-comments] [--auto-expand] [--header <header>]
[--schema <schema>] [--selector <fieldname[:prefix]>]
[--schema-only] [--raw] [--unnest-separator <separator>]
xsv <field-sep> <list-sep> <null-value>
[--allow-comments] [--auto-expand] [--header <header>]
[--schema <schema>] [--selector <fieldname[:prefix]>]
[--schema-only] [--raw] [--unnest-separator <separator>]

Printer:

csv [--no-header]
ssv [--no-header]
tsv [--no-header]
xsv <field-sep> <list-sep> <null-value> [--no-header]

Description

The xsv format is a generalization of comma-separated values (CSV) data in tabular form with a more flexible separator specification supporting tabs, commas, and spaces. The first line in an XSV file is the header that describes the field names. The remaining lines contain concrete values. One line corresponds to one event, minus the header.

The following table juxtaposes the available XSV configurations:

FormatField SeparatorList SeparatorNull Value
csv,;empty
ssv<space>,-
tsv\t,-

Like the json parser, the XSV parser infers types automatically. Consider this piece of CSV data:

ip,sn,str,rec.a,rec.b
1.2.3.4,10.0.0.0/8,foo bar,-4.2,/foo|bar/

Here's the schema that the parser infers from the above data:

record:
  - ip: ip
  - sn: subnet
  - str: string
  - record:
    - a: double
    - b: pattern

Note that nested records have dot-separated field names.

Common Options (Parser)

The XSV parser supports the common schema inference options.

<field-sep>

Specifies the string that separates fields. This is required for XSV and cannot be set for any of the other variations.

<list-sep>

Specifies the string that separates list elements within a field. This is required for XSV, but can be explicitly changed from the respective default for the other parsers.

<null-value>

Specifies the string that denotes an absent value. This is required for XSV, but can be explicitly changed from the respective default for the other parsers.

--allow-comments (Parser)

Treat lines beginning with '#' as comments.

`--auto-expand (Parser)

Automatically add fields to the schema when encountering events with too many values instead of dropping the excess values.

--header <header> (Parser)

Use the manually provided header line instead of treating the first line as the header.

--no-header (Printer)

Do not print a header line containing the field names.

Examples

Read CSV from stdin:

from stdin read csv

Write a multi-schema stream of events to a directory in TSV format, with one file per unique schema:

to directory /tmp/result write tsv