Hi,
I have a CSV ( current_assets.csv) with fields device_name and ip (and tons of values for them). Here is an example:
device_name ip
router1 122.145.11.2
laptop2 11.121.44.55
How do I search my index ( sourcetype="device_assets") for the CSV IPs and return whether or not each IP is found within the index?
An example result would be:
device_name ip found
router1 122.145.11.2 Yes
laptop2 11.121.44.55 No
Important note: The solution CANNOT use |join command because this is very intensive/slow for my current deployment.
Thanks