Knowledge Management

Is it possible to define an eventtype using a field added by an automatic lookup?

HeinzWaescher
Motivator

Hi,

is it possible to define an eventtype using a field added by an automatic lookup? I've read something about the order in the docs some time ago, but I can't find it.

Thanks in advance

Heinz

0 Karma
1 Solution

woodcock
Esteemed Legend

Yes. An eventtype is just a search.

View solution in original post

woodcock
Esteemed Legend

Yes. An eventtype is just a search.

HeinzWaescher
Motivator

Thank you! 🙂

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI! Discover how Splunk’s agentic AI ...

[Puzzles] Solve, Learn, Repeat: Dereferencing XML to Fixed-length events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...