https://community.splunk.com/t5/Splunk-Search/How-to-find-the-related-search-of-lookup-file/m-p/328569#M97805 <P>Thank you so much and for quick reply.. your search worked and it is what i am looking for.</P> Tue, 05 Dec 2017 23:08:36 GMT kteng2024 2017-12-05T23:08:36Z https://community.splunk.com/t5/Splunk-Search/How-to-find-the-related-search-of-lookup-file/m-p/328566#M97802 <P>Hi,</P> <P>Below query is using the CSV, can I please know how the CSV file is being generated like whether is there any query that is generating it , etc.</P> <P>| inputlookup webaccess.csv | tail 14 | reverse</P> Tue, 05 Dec 2017 22:51:43 GMT https://community.splunk.com/t5/Splunk-Search/How-to-find-the-related-search-of-lookup-file/m-p/328566#M97802 kteng2024 2017-12-05T22:51:43Z https://community.splunk.com/t5/Splunk-Search/How-to-find-the-related-search-of-lookup-file/m-p/328567#M97803 <P>As @richgalloway said at <A href="https://answers.splunk.com/answers/236695/how-to-create-a-lookup-table-from-search.html">How to create a lookup table from search</A></P> <P>-- Take a look at the outputlookup command at <A href="http://docs.splunk.com/Documentation/Splunk/6.2.3/SearchReference/Outputlookup">outputlookup</A></P> Tue, 05 Dec 2017 22:57:25 GMT https://community.splunk.com/t5/Splunk-Search/How-to-find-the-related-search-of-lookup-file/m-p/328567#M97803 ddrillic 2017-12-05T22:57:25Z https://community.splunk.com/t5/Splunk-Search/How-to-find-the-related-search-of-lookup-file/m-p/328568#M97804 <P>If you've file system access, you can search for that lookup file in $Splunk_home/etc/apps and $Splunk_home/etc/users directory (cd to that directory and grep) on your search head. </P> <P>If you've sufficient access to run the <CODE>| rest</CODE> command, try this (run on your search head)</P> <PRE><CODE>| rest splunk_server=local /servicesNS/-/-/saved/searches | table title eai:acl.app eai:acl.owner search | where match(search,"outputlookup\s+webaccess\.csv") </CODE></PRE> Tue, 29 Sep 2020 17:08:41 GMT https://community.splunk.com/t5/Splunk-Search/How-to-find-the-related-search-of-lookup-file/m-p/328568#M97804 somesoni2 2020-09-29T17:08:41Z https://community.splunk.com/t5/Splunk-Search/How-to-find-the-related-search-of-lookup-file/m-p/328569#M97805 <P>Thank you so much and for quick reply.. your search worked and it is what i am looking for.</P> Tue, 05 Dec 2017 23:08:36 GMT https://community.splunk.com/t5/Splunk-Search/How-to-find-the-related-search-of-lookup-file/m-p/328569#M97805 kteng2024 2017-12-05T23:08:36Z https://community.splunk.com/t5/Splunk-Search/How-to-find-the-related-search-of-lookup-file/m-p/328570#M97806 <P>Glad to be of help. Don't forget to close the question by accepting the answer that worked for you.</P> Tue, 05 Dec 2017 23:10:51 GMT https://community.splunk.com/t5/Splunk-Search/How-to-find-the-related-search-of-lookup-file/m-p/328570#M97806 somesoni2 2017-12-05T23:10:51Z