topic Re: Automated daily lookups in Splunk Search https://community.splunk.com/t5/Splunk-Search/Automated-daily-lookups/m-p/186035#M53599 <P>EDIT:<BR /> The top two .csv files are the same.</P> <P>index="URL" NOT [inputlookup <STRONG>A_listJan1.csv</STRONG> | fields gtld]<BR /> | inputlookup <STRONG>A_listJan1.csv</STRONG> append=true </P> Sat, 17 Jan 2015 21:37:34 GMT MayDayOne 2015-01-17T21:37:34Z Automated daily lookups https://community.splunk.com/t5/Splunk-Search/Automated-daily-lookups/m-p/186034#M53598 <P>index="URL" NOT [inputlookup A_list_Jan1.csv | fields gtld]<BR /> | inputlookup A_listJan1.csv append=true <BR /> | dedup gtld <BR /> | table gtld <BR /> | outputlookup [ | stats count | eval filename=strftime(now(), "B_list%b%d.csv") | return $filename]</P> <P>QUESTION:<BR /> I want to run this search daily. Is there anyway I can automate this search so that "B_list%b%d.csv" gets inserted as the first "inputlookup". This would result in the next days outputlookup as "C_list%b%d.csv".</P> <P>REASON:<BR /> I see 100's of new gtld's on daily basis and I'm making a list of "total gtld's seen". </P> <P>SECONDARY GOAL:<BR /> Create a second daily list of only the new gtld's seen for that day.</P> Mon, 28 Sep 2020 18:39:11 GMT https://community.splunk.com/t5/Splunk-Search/Automated-daily-lookups/m-p/186034#M53598 MayDayOne 2020-09-28T18:39:11Z Re: Automated daily lookups https://community.splunk.com/t5/Splunk-Search/Automated-daily-lookups/m-p/186035#M53599 <P>EDIT:<BR /> The top two .csv files are the same.</P> <P>index="URL" NOT [inputlookup <STRONG>A_listJan1.csv</STRONG> | fields gtld]<BR /> | inputlookup <STRONG>A_listJan1.csv</STRONG> append=true </P> Sat, 17 Jan 2015 21:37:34 GMT https://community.splunk.com/t5/Splunk-Search/Automated-daily-lookups/m-p/186035#M53599 MayDayOne 2015-01-17T21:37:34Z Re: Automated daily lookups https://community.splunk.com/t5/Splunk-Search/Automated-daily-lookups/m-p/186036#M53600 <P>You could make one lookup and include the timestamp of when that ID has been first seen. Should kill both birds with one stone, an overall list and - by filtering - a list per day.</P> Sat, 17 Jan 2015 21:38:16 GMT https://community.splunk.com/t5/Splunk-Search/Automated-daily-lookups/m-p/186036#M53600 martin_mueller 2015-01-17T21:38:16Z