Match function cannot handle duplicates in .csv - field parameter

net1993 commented 4 years ago

Humio Version: 1.6.2--build-7074--sha-1f9b4fd66
Browser Version
API
Query Examples: | match(file="cisco_asa_vendor_class_lookup.csv", column=message_id, field=Cisco_ASA_message_id , include=[vendor_class,vendor_definition], strict=false, glob=true)

Issue: In my .csv file there are duplicate records in message_id column but different values in the corresponding columns: 106,value1 106,value2 so the result in Humio is : value2 and what I expect is to get both values, every on new line: value value2 so the result event wil be: event1|value\n value2

Thank you in advance.

andejens commented 4 years ago

We have implemented this as a hash map - so for now having one key with one value is what we expect.

Could you elaborate a bit on your use case?

net1993 commented 4 years ago

Yes, sure. Let me know how can I help.

humio / issues

Match function cannot handle duplicates in .csv - field parameter #94