https://community.splunk.com/t5/Monitoring-Splunk/Performance-implication-of-automatic-lookups/m-p/295330#M2752 <P>Adding the lookup automatically isn't a great performance impact for reporting searches, ie ones that have a stats, chart, table, ... at the end. Splunk will only add the fields from the lookup if the reporting commands require the fields.<BR /> The performance impact comes in only if you filter by fields added by the lookup.</P> Thu, 11 Jan 2018 14:57:26 GMT mayurr98 2018-01-11T14:57:26Z https://community.splunk.com/t5/Monitoring-Splunk/Performance-implication-of-automatic-lookups/m-p/295329#M2751 <P>We need to group our hosts by customer and environment. I've created a lookup for this and it's working without any problems. </P> <P>What are the performance implications of including this as an automatic lookup?</P> Thu, 11 Jan 2018 14:27:18 GMT https://community.splunk.com/t5/Monitoring-Splunk/Performance-implication-of-automatic-lookups/m-p/295329#M2751 andrewbeak 2018-01-11T14:27:18Z https://community.splunk.com/t5/Monitoring-Splunk/Performance-implication-of-automatic-lookups/m-p/295330#M2752 <P>Adding the lookup automatically isn't a great performance impact for reporting searches, ie ones that have a stats, chart, table, ... at the end. Splunk will only add the fields from the lookup if the reporting commands require the fields.<BR /> The performance impact comes in only if you filter by fields added by the lookup.</P> Thu, 11 Jan 2018 14:57:26 GMT https://community.splunk.com/t5/Monitoring-Splunk/Performance-implication-of-automatic-lookups/m-p/295330#M2752 mayurr98 2018-01-11T14:57:26Z