I would like to know about to add a single field value to outputlookup, as currently there are some fields like id, condition, value is there , but the need is only to ingest condition, Can anyone provide the query for this.
The inputlookup command does have a way to specify which field(s) to return. You can, however, use the fields command for that.
| inputlookup mylookup.csv | fields condition
Thank for that. You also mentioned "ingest" twice so no wonder I mis-understood.
Lookup files must be updated in their entirety. You cannot replace a single row or field. @marysan has the right answer for replacing the entire lookup with a single column.
To be able to updated individual fields in a lookup, use a KVStore collection.
there is some ways to update just one field in a lookup
for example we have a lookup with (IP,reported) fields
if you want to change reported field from 0 to 1 just for a specific IP,for example IP:220.127.116.11 , and you dont want to change other values :
That is the method for updating a lookup file, but to be clear, the outputlookup command rewrites the entire lookup even if only a single bit is different.