Knowledge Management

Splunk lookup using wildcard on web

chanduira
Explorer

Hi All,

Is it possible to create lookup with wildcard on Splunk web it self.

Our use case : 100+ lookup need to be created with wildcard, creating it manually using transforms.conf is difficult.

Please help.

Tags (1)
0 Karma

ngatchasandra
Builder

Hi chanduira,

I think that you can't do it on splunk web. It is only possible using transforms.conf.

Follow also the link :
This will help you!
https://answers.splunk.com/answers/317952/set-wildcard-lookup-match-without-access-to-transf.html

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...