https://community.splunk.com/t5/Splunk-Enterprise/Can-I-load-multiple-lookup-files-from-one-index/m-p/692268#M19722 <P><SPAN class="">I'm practicing auto-lookup. Auto-lookup of vendors_ip.csv has already been successful in my index.<BR />Here, I would like to add auto-lookup for the prices.csv file in the same index.<BR />The process I followed uploaded a lookup table, created a lookup definition, and created an automatic lookup, but as a result of searching for index=main, only the prices.csv fields are not visible.<BR />The fields of vendors_ip that were previously successful are output.<BR />What I'm curious about is whether it is possible to perform multiple automatic lookups on one index in splunk.<BR />I would also like to know why the automatic lookup is not working.</SPAN></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="silverKi_0-1719984943252.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/31600i7DA57567BC2AB1E7/image-size/medium?v=v2&amp;px=400" role="button" title="silverKi_0-1719984943252.png" alt="silverKi_0-1719984943252.png" /></span></P> Wed, 03 Jul 2024 05:37:32 GMT silverKi 2024-07-03T05:37:32Z https://community.splunk.com/t5/Splunk-Enterprise/Can-I-load-multiple-lookup-files-from-one-index/m-p/692268#M19722 <P><SPAN class="">I'm practicing auto-lookup. Auto-lookup of vendors_ip.csv has already been successful in my index.<BR />Here, I would like to add auto-lookup for the prices.csv file in the same index.<BR />The process I followed uploaded a lookup table, created a lookup definition, and created an automatic lookup, but as a result of searching for index=main, only the prices.csv fields are not visible.<BR />The fields of vendors_ip that were previously successful are output.<BR />What I'm curious about is whether it is possible to perform multiple automatic lookups on one index in splunk.<BR />I would also like to know why the automatic lookup is not working.</SPAN></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="silverKi_0-1719984943252.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/31600i7DA57567BC2AB1E7/image-size/medium?v=v2&amp;px=400" role="button" title="silverKi_0-1719984943252.png" alt="silverKi_0-1719984943252.png" /></span></P> Wed, 03 Jul 2024 05:37:32 GMT https://community.splunk.com/t5/Splunk-Enterprise/Can-I-load-multiple-lookup-files-from-one-index/m-p/692268#M19722 silverKi 2024-07-03T05:37:32Z