topic Re: Reading IP addresses from a JSON file, and manage the IP addresses as whitelist in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Reading-IP-addresses-from-a-JSON-file-and-manage-the-IP/m-p/221167#M43412 <P>Whitelist where/what?</P> Fri, 06 Jan 2017 15:26:00 GMT somesoni2 2017-01-06T15:26:00Z Reading IP addresses from a JSON file, and manage the IP addresses as whitelist https://community.splunk.com/t5/Getting-Data-In/Reading-IP-addresses-from-a-JSON-file-and-manage-the-IP/m-p/221165#M43410 <P>Hi</P> <P>I want to read IP addresses from a Json file and manage the addresses that was read as a whitelist.</P> Fri, 06 Jan 2017 08:10:08 GMT https://community.splunk.com/t5/Getting-Data-In/Reading-IP-addresses-from-a-JSON-file-and-manage-the-IP/m-p/221165#M43410 Aina 2017-01-06T08:10:08Z Re: Reading IP addresses from a JSON file, and manage the IP addresses as whitelist https://community.splunk.com/t5/Getting-Data-In/Reading-IP-addresses-from-a-JSON-file-and-manage-the-IP/m-p/221166#M43411 <P>Hi @Aina</P> <P>For field extractions on json data use spath command: <A href="http://docs.splunk.com/Documentation/Splunk/6.5.0/SearchReference/Spath">http://docs.splunk.com/Documentation/Splunk/6.5.0/SearchReference/Spath</A></P> <P>Export your fields of interest in CSV format (IPs in this case) with outputlookup command: <A href="http://docs.splunk.com/Documentation/Splunk/6.5.0/SearchReference/Outputlookup">http://docs.splunk.com/Documentation/Splunk/6.5.0/SearchReference/Outputlookup</A></P> <P>You can then load that CSV into your query and use it like a whitelist with this commands, lookup, inputlookup: <A href="http://docs.splunk.com/Documentation/Splunk/6.5.0/SearchReference/Inputlookup">http://docs.splunk.com/Documentation/Splunk/6.5.0/SearchReference/Inputlookup</A></P> <P>If this is not the help you were looking for please elaborate your question so that I can help you.</P> <P>KR.</P> Fri, 06 Jan 2017 13:21:09 GMT https://community.splunk.com/t5/Getting-Data-In/Reading-IP-addresses-from-a-JSON-file-and-manage-the-IP/m-p/221166#M43411 alemarzu 2017-01-06T13:21:09Z Re: Reading IP addresses from a JSON file, and manage the IP addresses as whitelist https://community.splunk.com/t5/Getting-Data-In/Reading-IP-addresses-from-a-JSON-file-and-manage-the-IP/m-p/221167#M43412 <P>Whitelist where/what?</P> Fri, 06 Jan 2017 15:26:00 GMT https://community.splunk.com/t5/Getting-Data-In/Reading-IP-addresses-from-a-JSON-file-and-manage-the-IP/m-p/221167#M43412 somesoni2 2017-01-06T15:26:00Z