use an input csv file to pick up the values within while searching on splunk

[saurabhkunte]

Hello All,

This is what i want to achieve.
I have dhcp logs getting indexed to splunk.
Our virus scanners periodically alert us of workstation ip addresses which have virus infections. I want to find out associated machine names with these ip addresses
I can have an input csv file consumed by splunk. Now i want to run a splunk search to identify workstation names that had those ip addresses over a given period of time and display them in a table.

E.g input.csv
192.168.122.14
192.168.123.46

The idea is to not search for each ip address manually to find put the associated wprkstation name which can be time consuming. How can i achieve this ?

I am hoping one of you can help me out here. Thank you

[somesoni2]

I believe you're looking for something like what is mentioned in below post.

http://answers.splunk.com/answers/61853/resolve-ip-address

This post provides you steps to setup automatic lookup from IP address to host name (reverse is possible too).

[saurabhkunte]

Hi ,

Thanks for your post. But this not what Will solve my problem.
1st off our workstations do not register themselves in dns. So doing a dns lookup as it's mentioned in the post does not help.

2nd i already have dhcp logs integrated in splunk. I just need a mechanism In which the splunk search reads the ip addresses from the csv file one by one searchs the dhcp logs to find the workstation names that were associated with each ip and at the end lists ip to workstation name in a table form. Thank you.