topic Re: Use Splunk for a Static Value Lookup in Splunk Search https://community.splunk.com/t5/Splunk-Search/Use-Splunk-for-a-Static-Value-Lookup/m-p/314986#M162694 <P>I'm not exactly sure what you intended. But try this as a different way</P> <PRE><CODE>| makeresults | eval server_ip="10.22.10.250" | lookup dnslookup clients as server_ip output client_host as server_fqdn | lookup datastore server_fqdn OUTPUTNEW </CODE></PRE> Sun, 04 Mar 2018 15:32:47 GMT starcher 2018-03-04T15:32:47Z Use Splunk for a Static Value Lookup https://community.splunk.com/t5/Splunk-Search/Use-Splunk-for-a-Static-Value-Lookup/m-p/314985#M162693 <P>I have a data store that information is far faster and more reach to get to with Splunk and I am trying to figure out a way to generate information from one piece automatically from this source. In this specific example I tried the following</P> <P><CODE>| inputlookup datastore<BR /> | search [setfields server_ip="10.22.10.250" | lookup dnslookup clientip as server_ip output clienthost as server_fqdn | fields server_fqdn]</CODE></P> <P>But this is not rendering the information that I am looking for. The IP that I am using does have a corresponding <CODE>server_fqdn</CODE> value in the <CODE>inputlookup datastore</CODE> specified (I used a known good sample for this). I am hoping someone might be able to spot what I am not seeing in terms of syntax or value handling and offer a suggestion as to how to get this to work.</P> Wed, 28 Feb 2018 06:32:19 GMT https://community.splunk.com/t5/Splunk-Search/Use-Splunk-for-a-Static-Value-Lookup/m-p/314985#M162693 JeffBothel 2018-02-28T06:32:19Z Re: Use Splunk for a Static Value Lookup https://community.splunk.com/t5/Splunk-Search/Use-Splunk-for-a-Static-Value-Lookup/m-p/314986#M162694 <P>I'm not exactly sure what you intended. But try this as a different way</P> <PRE><CODE>| makeresults | eval server_ip="10.22.10.250" | lookup dnslookup clients as server_ip output client_host as server_fqdn | lookup datastore server_fqdn OUTPUTNEW </CODE></PRE> Sun, 04 Mar 2018 15:32:47 GMT https://community.splunk.com/t5/Splunk-Search/Use-Splunk-for-a-Static-Value-Lookup/m-p/314986#M162694 starcher 2018-03-04T15:32:47Z