I have a CSV ( current_assets.csv) with fields device_name and ip (and tons of values for them). Here is an example:
How do I search my index ( sourcetype="device_assets") for the CSV IPs and return whether or not each IP is found within the index?
An example result would be:
device_name ip found
router1 188.8.131.52 Yes
laptop2 184.108.40.206 No
Important note: The solution CANNOT use |join command because this is very intensive/slow for my current deployment.