Asset Lookup fields

[amulay26]

Are all the asset lookup fields mentioned in the asset lookup file compulsory fields?

[mstjohn_splunk]

@amulay26

Thanks for posting. Could you give us some more context for your query? You have a much better chance of getting your question answered if you provide more information about your issue. Plus, it will help guide future community users who are facing a similar problem.

[amulay26]

ip,mac,nt_host,dns,owner,priority,lat,long,city,country,bunit,category,pci_domain,is_expected,should_timesync should_update,requires_av these are the fields that appear in the assets.csv file for the assets lookup.

My question is whether or not all these fields need to have data? Or some of the data fields can be left blank?