How can a CSV based lookup table be added to Splunk Light Free; and are lookup tables supported in Splunk Light Free?
We've 30+ ones to add and would like a faster way such as the web interface instead of configuration file editing.
at least todays version supports it even in the GUI:
there is no lookup command on the list of available commands on Splunk Light.
Maybe, but it works
oh ok.. thanks.
splunk light does support lookups, you just have to configure them manually:
in ~etc/apps/search/lookups add your .csv file:
[mylookup] filename = mylookup.csv
It will also work if placed in app specific directories
The current version of Splunk Light does not support lookup tables.
Does Splunk Light still not support lookup tables? I'm looking to use an external source to correlate the IP addresses from my firewall logs to the DNS names of the matching computers. Is there another way to do this in Light?