I am trying a lookup search and I get some empty spaces (not all). My data has mixed case values between 'host' column from my logs and 'name' column from my Lookups. Is there a way to make the match case-insensitive or do like a UPPER() or LOWER() on both matching sides?
index=iis
| lookup ListOf_servers name as host OUTPUT description, comment
| table host description, comment
| dedup host
Under Lookup Definitions / / Advanced Option --> Uncheck 'Case sensitive match'