Importing KV store values from ITSI to a lookup fi...

pkol · ‎09-01-2019

Hey guys,
There is a certain mapping present between two multi-valued variables inside ITSI , I would like to use this mapping as a lookup in splunk.
Is there any way I can get this mapping into splunk in lookup tables, so that I can just use inputlookup command to get the mapping table.
I believe the config files are involved in this process and if so how do I access these files. Can someone point me in the right direction please. I am new to splunk
Thank you.

mdonnelly_splun · ‎09-04-2019

This document covers how to use lookups with KV Store data, including use with the inputlookup command:
http://dev.splunk.com/view/webframework-developapps/SP-CAAAEZH

Importing KV store values from ITSI to a lookup file in splunk

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever

Are you a member of the Splunk Community?

Importing KV store values from ITSI to a lookup file in splunk

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever