- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Can I load multiple lookup files from one index?
silverKi
Path Finder
07-02-2024
10:37 PM
I'm practicing auto-lookup. Auto-lookup of vendors_ip.csv has already been successful in my index.
Here, I would like to add auto-lookup for the prices.csv file in the same index.
The process I followed uploaded a lookup table, created a lookup definition, and created an automatic lookup, but as a result of searching for index=main, only the prices.csv fields are not visible.
The fields of vendors_ip that were previously successful are output.
What I'm curious about is whether it is possible to perform multiple automatic lookups on one index in splunk.
I would also like to know why the automatic lookup is not working.
