https://community.splunk.com/t5/Monitoring-Splunk/TrackMe-How-to-add-sourcetypes-programatically-to-AllowList/m-p/520653#M4464 <P>I would like the results of a search to populate the allow/block lists in TrackeMe. The lookup file requires a unique key.</P> <P>Any tips on how to generate that at search time?</P> Fri, 25 Sep 2020 20:47:47 GMT GOB_Bluth 2020-09-25T20:47:47Z https://community.splunk.com/t5/Monitoring-Splunk/TrackMe-How-to-add-sourcetypes-programatically-to-AllowList/m-p/520653#M4464 <P>I would like the results of a search to populate the allow/block lists in TrackeMe. The lookup file requires a unique key.</P> <P>Any tips on how to generate that at search time?</P> Fri, 25 Sep 2020 20:47:47 GMT https://community.splunk.com/t5/Monitoring-Splunk/TrackMe-How-to-add-sourcetypes-programatically-to-AllowList/m-p/520653#M4464 GOB_Bluth 2020-09-25T20:47:47Z https://community.splunk.com/t5/Monitoring-Splunk/TrackMe-How-to-add-sourcetypes-programatically-to-AllowList/m-p/521592#M4482 <P>Are you referring to _key?<BR />That's autogenerated for kvstore entries. You don't need to manually generate it&nbsp;</P> Sat, 26 Sep 2020 07:09:27 GMT https://community.splunk.com/t5/Monitoring-Splunk/TrackMe-How-to-add-sourcetypes-programatically-to-AllowList/m-p/521592#M4482 gjanders 2020-09-26T07:09:27Z