parse_csv

This page explains how to use the parse_csv function in APL.

The parse_csv function splits a comma-separated values (CSV) string into an array of strings. Use this function to parse CSV-formatted log entries, configuration values, or any comma-delimited data into individual values for analysis.

For users of other query languages

If you come from other query languages, this section explains how to adjust your existing queries to achieve the same results in APL.

Splunk SPL users

In Splunk SPL, you use rex or the split function to parse CSV. APL’s parse_csv provides proper CSV parsing with quote handling.

Splunk example

| makemv delim="," field_name

ANSI SQL users

In ANSI SQL, parsing CSV requires string splitting functions that vary by database. APL’s parse_csv provides standardized CSV parsing.

SQL example

SELECT STRING_TO_ARRAY(field_name, ',') AS values FROM logs;

Usage

Syntax

parse_csv(csv_text)

Parameters

Name	Type	Required	Description
csv_text	string	Yes	A string containing comma-separated values to parse.

Returns

Returns a string array containing the individual values from the CSV string. Properly handles quoted values and escaped characters.

Use case examples

Log analysis

Parse comma-separated status codes or error types from log messages.

Query

['sample-http-logs']
| extend status_list = parse_csv('200,201,204,304')
| extend is_success = status in (status_list)
| summarize request_count = count() by is_success, status
| sort by request_count desc
| limit 10

Run in Playground

Output

is_success	status	request_count
true	200	8765
false	404	2341
false	500	1234
true	304	987

This query parses a CSV list of success status codes and categorizes requests accordingly.

List of related functions

• split: Splits strings by any delimiter. Use this when working with non-CSV delimiters or when quote handling is not needed.
• parse_json: Parses JSON strings into dynamic objects. Use this when working with JSON arrays rather than CSV.
• strcat_delim: Concatenates strings with delimiters. Use this to create CSV strings from individual values.
• extract_all: Extracts multiple regex matches. Use this for more complex parsing patterns beyond CSV.