Getting Data In
Highlighted

Refresh Transform

Motivator

Hi

I am trying to define a new transform.conf in SPLUNK 7 so that a lookup can take a wild character.

The initial MXTIMINGlookupBase is working, so i copied it and added a 1 to the end.
I then ran the refresh, to reload the transform.conf, however they wont reload.

http://dell425srv:8000/en-GB/debug/refresh?entity=admin/transforms-lookup
http://dell425srv:8000/en-GB/debug/refresh?entity=admin/transforms-extract
http://dell425srv:8000/en-GB/debug/refresh

[MXTIMINGlookupBase]
filename = MXTIMINGBASE.csv
match
type = WILDCARD(Context_Command)

[MXTIMINGlookupBase1]
filename = MXTIMINGBASE1.csv
match
type = WILDCARD(Context_Command)

Perhaps i am missing something, but this used to refresh in SPLUNK 6

Any help is great thanks
Robert Lynch

0 Karma
Highlighted

Re: Refresh Transform

Motivator

Hi - Please ignore - This did work in the end

View solution in original post

0 Karma