How to add a CSV lookup table - Splunk Light Free eval

[L479]

How can a CSV based lookup table be added to Splunk Light Free; and are lookup tables supported in Splunk Light Free?

We've 30+ ones to add and would like a faster way such as the web interface instead of configuration file editing.

[jphohloch]

at least todays version supports it even in the GUI:
https://docs.splunk.com/Documentation/SplunkLight/6.5.1612/GettingStarted/Usinglookups

[inventsekar]

http://docs.splunk.com/Documentation/SplunkLight/6.4.2/References/Listofsearchcommands
there is no lookup command on the list of available commands on Splunk Light.

[waechtler]

Maybe, but it works

[inventsekar]

oh ok.. thanks.

[waechtler]

splunk light does support lookups, you just have to configure them manually:

in ~etc/apps/search/lookups add your .csv file:
mylookup.csv

in ~etc/apps/search/local/transforms.conf:

[mylookup]
filename = mylookup.csv

It will also work if placed in app specific directories

[sophy]

The current version of Splunk Light does not support lookup tables.

[yschiff]

Does Splunk Light still not support lookup tables? I'm looking to use an external source to correlate the IP addresses from my firewall logs to the DNS names of the matching computers. Is there another way to do this in Light?