<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Dynamic lookup file name in Transforms.conf in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Dynamic-lookup-file-name-in-Transforms-conf/m-p/58064#M11370</link>
    <description>&lt;P&gt;If it were me, I would symbolically link the 'lookup.csv' to your updated lookup_mmddyyy.csv' when you create it to make it work.&lt;/P&gt;</description>
    <pubDate>Wed, 25 Jan 2012 17:49:13 GMT</pubDate>
    <dc:creator>Linegod</dc:creator>
    <dc:date>2012-01-25T17:49:13Z</dc:date>
    <item>
      <title>Dynamic lookup file name in Transforms.conf</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Dynamic-lookup-file-name-in-Transforms-conf/m-p/58063#M11369</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;We have a cron job which periodically updates the lookup file. The file name is of the format lookup_mmddyyyy.csv where mmddyyyy is date on which the file is generated. Currently I manually change the file name to lookup.csv since the transforms.conf has following:&lt;/P&gt;

&lt;P&gt;[AppLogLookup]&lt;/P&gt;

&lt;P&gt;case_sensitive_match=false&lt;/P&gt;

&lt;P&gt;filename=lookup.csv&lt;/P&gt;

&lt;P&gt;Is there any way I give the name with date? for e.g.&lt;/P&gt;

&lt;P&gt;[AppLogLookup]&lt;/P&gt;

&lt;P&gt;case_sensitive_match=false&lt;/P&gt;

&lt;P&gt;filename=lookup_mmddyyyy.csv&lt;/P&gt;

&lt;P&gt;Appreciate all the help.&lt;/P&gt;

&lt;P&gt;Thanks,&lt;BR /&gt;
Suvelee&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 09:48:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Dynamic-lookup-file-name-in-Transforms-conf/m-p/58063#M11369</guid>
      <dc:creator>sscandoit</dc:creator>
      <dc:date>2020-09-28T09:48:06Z</dc:date>
    </item>
    <item>
      <title>Re: Dynamic lookup file name in Transforms.conf</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Dynamic-lookup-file-name-in-Transforms-conf/m-p/58064#M11370</link>
      <description>&lt;P&gt;If it were me, I would symbolically link the 'lookup.csv' to your updated lookup_mmddyyy.csv' when you create it to make it work.&lt;/P&gt;</description>
      <pubDate>Wed, 25 Jan 2012 17:49:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Dynamic-lookup-file-name-in-Transforms-conf/m-p/58064#M11370</guid>
      <dc:creator>Linegod</dc:creator>
      <dc:date>2012-01-25T17:49:13Z</dc:date>
    </item>
    <item>
      <title>Re: Dynamic lookup file name in Transforms.conf</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Dynamic-lookup-file-name-in-Transforms-conf/m-p/58065#M11371</link>
      <description>&lt;P&gt;Thanks a lot. That's an easy solution.&lt;/P&gt;</description>
      <pubDate>Wed, 25 Jan 2012 17:56:19 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Dynamic-lookup-file-name-in-Transforms-conf/m-p/58065#M11371</guid>
      <dc:creator>sscandoit</dc:creator>
      <dc:date>2012-01-25T17:56:19Z</dc:date>
    </item>
  </channel>
</rss>

