Archive

Is there a way to use VLOOKUP function in Splunk?

vs2d
New Member

Hello,

Among all the jobs that are running on mainframe I need to bring back the ones that correspond specifically to Control-M. For that matter there's .csv file that contains APPL column with 3-4 alphanumeric values that correspond to the first 3-4 JOBNAME values that are specific to Control-M. So I am wondering if there is the way to rebuild VLOOKUP function in Splunk that looking up .csv data it will bring back only JOBNAMEs that correspond to those APPL values?

Tags (1)
0 Karma
1 Solution

somesoni2
Revered Legend
0 Karma

lfedak_splunk
Splunk Employee
Splunk Employee

Hey @vs2d, if they answered your question, please remember to "√Accept" an answer to award karma points and to let other Splunkers know there’s a working solution. We’re hosting a karma point contest, so it’s particularly awesome to up vote on Answers these days. 😄

0 Karma

andrewfrantz
Engager

As the other responder said, I would set up an automatic pivot for the CSV file. You could then use a wildcard on the pivoted data field to ignore the rest of the string.

This link can be used for instructions on how to setup lookups:

0 Karma

somesoni2
Revered Legend
0 Karma