topic Re: Combining Several lookups. in Dashboards & Visualizations

Combining Several lookups.

Mary666 — Fri, 06 Nov 2020 20:33:07 GMT

Hello,

Splunk newbie, I have been able to combine several lookups using | inputlookup, and also using | inputlookup append=t. However, I am not able to combine the lookup to the ones I have just created. I see I no longer get the must specify one or more lookup files error, but all of my values from my lookup are coming back null. Is my format correct for the code below:

| lookup X_Server_Status.csv Server_Name OUTPUT Status

I want to display the current status of the server.

Re: Combining Several lookups.

richgalloway — Fri, 06 Nov 2020 20:43:28 GMT

Please share the full query, if you can (sanitize as necessary). You mention using both inputlookup and lookup, but it's not clear how they're being use in relation to each other.

Re: Combining Several lookups.

Mary666 — Sat, 07 Nov 2020 00:30:39 GMT

I figured out my error. It was an issue with the a

Re: Combining Several lookups.

Mary666 — Sat, 07 Nov 2020 00:31:10 GMT

I'm sorry issue with the actual lookup