<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Cidrmatch between two lookups in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Cidrmatch-between-two-lookups/m-p/584006#M203374</link>
    <description>&lt;P&gt;I have two lookup files.&lt;/P&gt;&lt;P&gt;My first lookup file has the columns: ip, host, dnsName. We will call it List1.csv&lt;/P&gt;&lt;P&gt;The second lookup file has the columns: subnet, site, location. (with the subnets having CIDR notation). We will call this one List2.csv&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I am trying to match up the items in List1 with their respective subnet from List2. However my search does not return any results.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;If someone could assist me with my search, i'd appreciate it!&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;|inputlookup List1.csv |lookup List2.csv subnet output subnet site |where cidrmatch(subnet, ip) |table ip subnet dnsName&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Mon, 07 Feb 2022 19:15:27 GMT</pubDate>
    <dc:creator>Stefanie</dc:creator>
    <dc:date>2022-02-07T19:15:27Z</dc:date>
    <item>
      <title>Cidrmatch between two lookups</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Cidrmatch-between-two-lookups/m-p/584006#M203374</link>
      <description>&lt;P&gt;I have two lookup files.&lt;/P&gt;&lt;P&gt;My first lookup file has the columns: ip, host, dnsName. We will call it List1.csv&lt;/P&gt;&lt;P&gt;The second lookup file has the columns: subnet, site, location. (with the subnets having CIDR notation). We will call this one List2.csv&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I am trying to match up the items in List1 with their respective subnet from List2. However my search does not return any results.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;If someone could assist me with my search, i'd appreciate it!&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;|inputlookup List1.csv |lookup List2.csv subnet output subnet site |where cidrmatch(subnet, ip) |table ip subnet dnsName&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 07 Feb 2022 19:15:27 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Cidrmatch-between-two-lookups/m-p/584006#M203374</guid>
      <dc:creator>Stefanie</dc:creator>
      <dc:date>2022-02-07T19:15:27Z</dc:date>
    </item>
    <item>
      <title>Re: Cidrmatch between two lookups</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Cidrmatch-between-two-lookups/m-p/584011#M203377</link>
      <description>&lt;P&gt;You need a common field for that between 2 lookups&lt;/P&gt;</description>
      <pubDate>Mon, 07 Feb 2022 19:36:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Cidrmatch-between-two-lookups/m-p/584011#M203377</guid>
      <dc:creator>SinghK</dc:creator>
      <dc:date>2022-02-07T19:36:28Z</dc:date>
    </item>
    <item>
      <title>Re: Cidrmatch between two lookups</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Cidrmatch-between-two-lookups/m-p/584017#M203379</link>
      <description>&lt;P&gt;Thanks so if I rename the column in List2 from Subnet to ip, how would I word that in my search?&lt;/P&gt;</description>
      <pubDate>Mon, 07 Feb 2022 20:11:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Cidrmatch-between-two-lookups/m-p/584017#M203379</guid>
      <dc:creator>Stefanie</dc:creator>
      <dc:date>2022-02-07T20:11:39Z</dc:date>
    </item>
  </channel>
</rss>

