https://community.splunk.com/t5/Splunk-Search/Where-to-download-lookup-file-related-to-sales-index-retail/m-p/742230#M240801 <P><span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="count retail sales events for strategy games" style="width: 868px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/38267iA2CDB1D4F0286D2E/image-size/large?v=v2&amp;px=999" role="button" title="Screenshot 2025-03-19 at 16.20.27.png" alt="count retail sales events for strategy games" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">count retail sales events for strategy games</span></span></P><P>&nbsp;</P><P>I can't find categoryId field by default from the search tutorial data. It has been added by a lookup file but I don't know where can I download it.</P><P>Can anyone help help this ? Thanks</P> Wed, 19 Mar 2025 15:37:53 GMT Ombessam 2025-03-19T15:37:53Z https://community.splunk.com/t5/Splunk-Search/Where-to-download-lookup-file-related-to-sales-index-retail/m-p/742230#M240801 <P><span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="count retail sales events for strategy games" style="width: 868px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/38267iA2CDB1D4F0286D2E/image-size/large?v=v2&amp;px=999" role="button" title="Screenshot 2025-03-19 at 16.20.27.png" alt="count retail sales events for strategy games" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">count retail sales events for strategy games</span></span></P><P>&nbsp;</P><P>I can't find categoryId field by default from the search tutorial data. It has been added by a lookup file but I don't know where can I download it.</P><P>Can anyone help help this ? Thanks</P> Wed, 19 Mar 2025 15:37:53 GMT https://community.splunk.com/t5/Splunk-Search/Where-to-download-lookup-file-related-to-sales-index-retail/m-p/742230#M240801 Ombessam 2025-03-19T15:37:53Z https://community.splunk.com/t5/Splunk-Search/Where-to-download-lookup-file-related-to-sales-index-retail/m-p/742234#M240803 Tutorial data can found from <A href="https://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/Systemrequirements#Download_the_tutorial_data_files" target="_blank">https://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/Systemrequirements#Download_the_tutorial_data_files</A> Wed, 19 Mar 2025 16:08:41 GMT https://community.splunk.com/t5/Splunk-Search/Where-to-download-lookup-file-related-to-sales-index-retail/m-p/742234#M240803 isoutamo 2025-03-19T16:08:41Z https://community.splunk.com/t5/Splunk-Search/Where-to-download-lookup-file-related-to-sales-index-retail/m-p/742238#M240804 <P>categoryId is not used in the vendor_sales sourcetype - try looking in the access_combined_wcookie sourcetype (there is no additional lookup for this information).</P> Wed, 19 Mar 2025 16:16:44 GMT https://community.splunk.com/t5/Splunk-Search/Where-to-download-lookup-file-related-to-sales-index-retail/m-p/742238#M240804 ITWhisperer 2025-03-19T16:16:44Z https://community.splunk.com/t5/Splunk-Search/Where-to-download-lookup-file-related-to-sales-index-retail/m-p/742245#M240805 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168">@ITWhisperer</a>&nbsp; you're right, the correct source type is&nbsp; access_combined</P><P>&nbsp;<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2025-03-19 at 17.26.32.png" style="width: 868px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/38271i02B040FBA609513F/image-size/large?v=v2&amp;px=999" role="button" title="Screenshot 2025-03-19 at 17.26.32.png" alt="Screenshot 2025-03-19 at 17.26.32.png" /></span></P> Wed, 19 Mar 2025 16:31:11 GMT https://community.splunk.com/t5/Splunk-Search/Where-to-download-lookup-file-related-to-sales-index-retail/m-p/742245#M240805 Ombessam 2025-03-19T16:31:11Z