Unable to pass the value from CSV into kvlookup and return results

[w344423]

Hi All, i need help and would understand can Splunk forward a value from CSV and compare the value in a lookup and return the col of that KV back into the main search. As I am having difficulties doing that with my expected search query, it always return nothing in the ProviderName, Country, CountryCode, IPEnd, IPStart fields

And this is the expected search query and with this search should produce the below results,

| inputlookup VPNNewVersion.csv
| fields user Internet_IP InternetIPToIntg
| appendcols
[| inputlookup GeoIPCountry
| where IPtoIntEnd>=InternetIPToIntg AND IPtoIntStart<=InternetIPToIntg
| table IPtoIntStart IPtoIntEnd Country CountryCode IPEnd IPStart]
| appendcols
[| inputlookup GeoIPASNum
| where IPtoIntEnd>=InternetIPToIntg AND IPtoIntStart<=InternetIPToIntg
| table IPtoIntStart IPtoIntEnd ProviderName]
| table user Internet_IP InternetIPToIntg ProviderName Country CountryCode IPEnd IPStart

[mstjohn_splunk]

@w344423

If you want to try to get some immediate help for your question, you should join the 5000+ Splunk users in our public Slack Community chat. People ask each other for immediate help on there daily. You can share your question/link to your post there to see if anyone can take a stab at it.

You first have to request access through https://splk.it/slack Fill out the form, and once you receive the approval email from our Community Manager (usually the approval process may take a couple days), you can access Slack.com and ask for help in the #general channel.

[w344423]

Thank you for this useful info. Awaiting for their approval now.

[w344423]

Wondering if any kind soul here able to provide a solution or there are no solution to this. Been trying this for a while but nothing seems to work,