topic Re: LOOKUP table: How to add id field name.csv file? in Splunk Search

LOOKUP table: How to add id field name.csv file?

abi2023 — Tue, 15 Aug 2023 21:45:37 GMT

I have two lookup table call name.csv and id.csv. both has matching field call fullname.
id.csv file has id field but name.csv doesnot. but I want to add id field to name.csv. Is anyone know how to add id field name.csv file.
I try

| inputlookup name.csv | lookup id.csv fullname output id

but it didnot work.

Re: LOOKUP table

ITWhisperer — Tue, 15 Aug 2023 15:49:19 GMT

It looks like it should work. Can you provide examples of where it does not work and where it does work (if at all)?

Re: LOOKUP table: How to add id field name.csv file?

gcusello — Wed, 16 Aug 2023 09:39:35 GMT

Hi @abi2023,

as @ITWhisperer said, your search should work!

did you created the Lookup Definition for the id.csv lookup? [Settings > Lookups > lookup Defintion]

which kind of issue are you reporting?

not all the records match,
no records march?

In other words, could you better describe your issue?

Ciao.

Giuseppe