"Lookup File Editor" match_type settings

[Mockjin]

Hi,

i am trying the App "Lookup File Editor" and have problems with the match_type settings. Normal lookups can be configured to use match_type=CIDR or something else. I cant find similar settings in the "Lookup File Editor" app from splunkbase. Do i something wrong or is this feature not included?

Thanks

[richgalloway · Accepted solution]

There are no such settings in the Lookup File Editor app.  The app is for modifying a lookup file.  Match_type settings are for lookups, which may or may not correspond to a lookup file.

IOW, lookups are an abstraction, but the Lookup File Editor is for working with a physical data file.

[Mockjin]

@richgalloway  thank you for your fast answer 🙂