Hello,
Among all the jobs that are running on mainframe I need to bring back the ones that correspond specifically to Control-M. For that matter there's .csv file that contains APPL column with 3-4 alphanumeric values that correspond to the first 3-4 JOBNAME values that are specific to Control-M. So I am wondering if there is the way to rebuild VLOOKUP function in Splunk that looking up .csv data it will bring back only JOBNAMEs that correspond to those APPL values?
You probably need to setup Lookup with wildcard match. See this
https://answers.splunk.com/answers/52580/can-we-use-wildcard-characters-in-a-lookup-table.html
Hey @vs2d, if they answered your question, please remember to "√Accept" an answer to award karma points and to let other Splunkers know there’s a working solution. We’re hosting a karma point contest, so it’s particularly awesome to up vote on Answers these days. 😄
As the other responder said, I would set up an automatic pivot for the CSV file. You could then use a wildcard on the pivoted data field to ignore the rest of the string.
This link can be used for instructions on how to setup lookups:
You probably need to setup Lookup with wildcard match. See this
https://answers.splunk.com/answers/52580/can-we-use-wildcard-characters-in-a-lookup-table.html