https://community.splunk.com/t5/Security/Splunk-Automatic-Lookups-and-Capitlization/m-p/303311#M12622 <P>Will that work with CSV lookups or jsut KSV? I'm diong a pull from Active Directory, dropping it into a CSV file and then creating lookups</P> Wed, 04 Apr 2018 16:32:44 GMT jmcclure 2018-04-04T16:32:44Z https://community.splunk.com/t5/Security/Splunk-Automatic-Lookups-and-Capitlization/m-p/303309#M12620 <P>What is a work around for case sensitive automatic lookups? I am trying to build out an automatic lookup for users and the users are all different types of capitilization. I am doing a pull from ldap dropping it into a CSV and then having a custom Splunk command execute a python script that that duplicates every row with different user capitilization. BUT I still am having issues with one offs...</P> <P>I know caculated fields could work BUT they are after lookups in searchtime calculations</P> Wed, 04 Apr 2018 15:29:30 GMT https://community.splunk.com/t5/Security/Splunk-Automatic-Lookups-and-Capitlization/m-p/303309#M12620 jmcclure 2018-04-04T15:29:30Z https://community.splunk.com/t5/Security/Splunk-Automatic-Lookups-and-Capitlization/m-p/303310#M12621 <P>See option for case_sensitive_match = </P> <P>In the lookups stanza for transforms.conf<BR /> <A href="https://docs.splunk.com/Documentation/Splunk/7.0.3/Admin/Transformsconf" target="_blank">https://docs.splunk.com/Documentation/Splunk/7.0.3/Admin/Transformsconf</A></P> Tue, 29 Sep 2020 18:46:55 GMT https://community.splunk.com/t5/Security/Splunk-Automatic-Lookups-and-Capitlization/m-p/303310#M12621 starcher 2020-09-29T18:46:55Z https://community.splunk.com/t5/Security/Splunk-Automatic-Lookups-and-Capitlization/m-p/303311#M12622 <P>Will that work with CSV lookups or jsut KSV? I'm diong a pull from Active Directory, dropping it into a CSV file and then creating lookups</P> Wed, 04 Apr 2018 16:32:44 GMT https://community.splunk.com/t5/Security/Splunk-Automatic-Lookups-and-Capitlization/m-p/303311#M12622 jmcclure 2018-04-04T16:32:44Z