topic Re: Using a lookup to grab a host's subnet and then list out all other hosts in that subnet. in Splunk Search https://community.splunk.com/t5/Splunk-Search/Using-a-lookup-to-grab-a-host-s-subnet-and-then-list-out-all/m-p/22331#M3834 <P>You should look at subsearches: <A href="http://docs.splunk.com/Documentation/Splunk/5.0/Search/Aboutsubsearches">http://docs.splunk.com/Documentation/Splunk/5.0/Search/Aboutsubsearches</A></P> Mon, 05 Nov 2012 03:40:03 GMT gkanapathy 2012-11-05T03:40:03Z Using a lookup to grab a host's subnet and then list out all other hosts in that subnet. https://community.splunk.com/t5/Splunk-Search/Using-a-lookup-to-grab-a-host-s-subnet-and-then-list-out-all/m-p/22330#M3833 <P>I have a lookup table that includes fields for hostname and subnet. I can easily view all hosts in a subnet by searching: |inputlookup subnet_map.csv | where subnet LIKE "111.111.111.111%" | table hostname,subnet ... I'd prefer to be able to grab the subnet field from a search like: |inputlookup subnet_map.csv | where host LIKE "my_host%" | table subnet ... and push it into the "where subnet LIKE "subnet" ... so that I grab a list of all hosts in the matching subnet but by using a single hostname.</P> <P>In essence, what I need to do is take the output of one inputlookup request and pipe it to a second one.</P> <P>I apologize if I'm wording this poorly.</P> <P>Thank you.</P> Mon, 28 Sep 2020 12:44:29 GMT https://community.splunk.com/t5/Splunk-Search/Using-a-lookup-to-grab-a-host-s-subnet-and-then-list-out-all/m-p/22330#M3833 pkeller 2020-09-28T12:44:29Z Re: Using a lookup to grab a host's subnet and then list out all other hosts in that subnet. https://community.splunk.com/t5/Splunk-Search/Using-a-lookup-to-grab-a-host-s-subnet-and-then-list-out-all/m-p/22331#M3834 <P>You should look at subsearches: <A href="http://docs.splunk.com/Documentation/Splunk/5.0/Search/Aboutsubsearches">http://docs.splunk.com/Documentation/Splunk/5.0/Search/Aboutsubsearches</A></P> Mon, 05 Nov 2012 03:40:03 GMT https://community.splunk.com/t5/Splunk-Search/Using-a-lookup-to-grab-a-host-s-subnet-and-then-list-out-all/m-p/22331#M3834 gkanapathy 2012-11-05T03:40:03Z Re: Using a lookup to grab a host's subnet and then list out all other hosts in that subnet. https://community.splunk.com/t5/Splunk-Search/Using-a-lookup-to-grab-a-host-s-subnet-and-then-list-out-all/m-p/22332#M3835 <P>Ultimately was able to get this sorted out by using the following search syntax ... </P> <P>|inputlookup mylookup.csv | search [|inputlookup mylookup.csv | table hostname,subnet | where hostname like "foobar-host%" | return subnet ]</P> Mon, 26 Nov 2012 23:49:29 GMT https://community.splunk.com/t5/Splunk-Search/Using-a-lookup-to-grab-a-host-s-subnet-and-then-list-out-all/m-p/22332#M3835 pkeller 2012-11-26T23:49:29Z