https://community.splunk.com/t5/Getting-Data-In/I-have-to-combine-two-csv-files-of-the-lookup/m-p/320173#M59784 <P>The field is having created date till some time in first file and after that duration i have the data in other csv file .How can I combine these files ?Each of the file is having one unique field values for one particular field .Just take it as field1</P> Fri, 19 Jan 2018 06:00:36 GMT chitreshakumar 2018-01-19T06:00:36Z https://community.splunk.com/t5/Getting-Data-In/I-have-to-combine-two-csv-files-of-the-lookup/m-p/320173#M59784 <P>The field is having created date till some time in first file and after that duration i have the data in other csv file .How can I combine these files ?Each of the file is having one unique field values for one particular field .Just take it as field1</P> Fri, 19 Jan 2018 06:00:36 GMT https://community.splunk.com/t5/Getting-Data-In/I-have-to-combine-two-csv-files-of-the-lookup/m-p/320173#M59784 chitreshakumar 2018-01-19T06:00:36Z https://community.splunk.com/t5/Getting-Data-In/I-have-to-combine-two-csv-files-of-the-lookup/m-p/320174#M59785 <P>hi,<BR /> Try this:</P> <PRE><CODE>| inputlookup lookup1.csv |table field1| append [| inputlookup append=true lookup2.csv |table field1] | table field1 </CODE></PRE> Fri, 19 Jan 2018 06:06:19 GMT https://community.splunk.com/t5/Getting-Data-In/I-have-to-combine-two-csv-files-of-the-lookup/m-p/320174#M59785 493669 2018-01-19T06:06:19Z https://community.splunk.com/t5/Getting-Data-In/I-have-to-combine-two-csv-files-of-the-lookup/m-p/320175#M59786 <P>Will that contain created date field along with field1.Or should I add <BR /> | inputlookup lookup1.csv |table field1,created_date| append [| inputlookup append=true lookup2.csv |table field1,created_date] | table field1,created_date</P> Tue, 29 Sep 2020 17:45:07 GMT https://community.splunk.com/t5/Getting-Data-In/I-have-to-combine-two-csv-files-of-the-lookup/m-p/320175#M59786 chitreshakumar 2020-09-29T17:45:07Z https://community.splunk.com/t5/Getting-Data-In/I-have-to-combine-two-csv-files-of-the-lookup/m-p/320176#M59787 <P>yes you need to add <BR /> or try this also:</P> <PRE><CODE>| inputlookup lookup1.csv | append [| inputlookup append=true lookup2.csv ] | table field1, created_date </CODE></PRE> Fri, 19 Jan 2018 06:11:35 GMT https://community.splunk.com/t5/Getting-Data-In/I-have-to-combine-two-csv-files-of-the-lookup/m-p/320176#M59787 493669 2018-01-19T06:11:35Z https://community.splunk.com/t5/Getting-Data-In/I-have-to-combine-two-csv-files-of-the-lookup/m-p/320177#M59788 <P>Ok Thanks!!</P> Fri, 19 Jan 2018 06:20:00 GMT https://community.splunk.com/t5/Getting-Data-In/I-have-to-combine-two-csv-files-of-the-lookup/m-p/320177#M59788 chitreshakumar 2018-01-19T06:20:00Z