Hi all,
I created a lookup 6 months ago and now i have hundreds of lookup and i forgot what was it's name. I am looking for an IP address in which lookup it is but i couldn't find a way to do this. I want to find out which lookup an IP address is in.
Any help would be appreciated!
If you have console access to your SH, you might do it with (assuming that you're looking for 1.2.3.4 and your Splunk is installed in default place):
find /opt/splunk -type f -path \*/lookups/\* -print0 | xargs -0 grep '1\.2\.3\.4'
