Hello,
Splunk newbie, I have been able to combine several lookups using | inputlookup, and also using | inputlookup append=t. However, I am not able to combine the lookup to the ones I have just created. I see I no longer get the must specify one or more lookup files error, but all of my values from my lookup are coming back null. Is my format correct for the code below:
| lookup X_Server_Status.csv Server_Name OUTPUT Status
I want to display the current status of the server.
I'm sorry issue with the actual lookup
I figured out my error. It was an issue with the a
Please share the full query, if you can (sanitize as necessary). You mention using both inputlookup and lookup, but it's not clear how they're being use in relation to each other.