https://community.splunk.com/t5/Splunk-Search/lookup-file-csv/m-p/351785#M104110 <P>i have a search in splunk<BR /> search dest_ip=10.10.20.3 OR dest_ip=10.2.3.5 OR dest_ip=10.6.7.4 OR dest_ip=10.0.4.6</P> <P>. I have a file csv<BR /> dest_ip<BR /> 10.10.20.3<BR /> 10.2.3.5<BR /> 10.6.7.4<BR /> 10.0.4.6</P> <P>how do i change search to lookup file csv</P> Tue, 29 Sep 2020 18:29:16 GMT vumanhtai 2020-09-29T18:29:16Z https://community.splunk.com/t5/Splunk-Search/lookup-file-csv/m-p/351785#M104110 <P>i have a search in splunk<BR /> search dest_ip=10.10.20.3 OR dest_ip=10.2.3.5 OR dest_ip=10.6.7.4 OR dest_ip=10.0.4.6</P> <P>. I have a file csv<BR /> dest_ip<BR /> 10.10.20.3<BR /> 10.2.3.5<BR /> 10.6.7.4<BR /> 10.0.4.6</P> <P>how do i change search to lookup file csv</P> Tue, 29 Sep 2020 18:29:16 GMT https://community.splunk.com/t5/Splunk-Search/lookup-file-csv/m-p/351785#M104110 vumanhtai 2020-09-29T18:29:16Z https://community.splunk.com/t5/Splunk-Search/lookup-file-csv/m-p/351786#M104111 <P>@vumanhtai, try the following:</P> <PRE><CODE>&lt;yourBaseSearch&gt; [|inputlookup &lt;yourLookupFile&gt;.csv | table dest_ip] </CODE></PRE> Wed, 14 Mar 2018 11:37:39 GMT https://community.splunk.com/t5/Splunk-Search/lookup-file-csv/m-p/351786#M104111 niketn 2018-03-14T11:37:39Z