- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Avoid .csv extension while doing outputlookup / creating lookup file
Ravan
Path Finder
01-20-2012
03:38 AM
Hi ,
How to avoid .csv extension while i am mentioning lookupfile name in outputlookup
Ex : ..search | outputlookup mylookup.csv
In need lokkupfile name as mylookup
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Drainy
Champion
01-20-2012
04:37 AM
In transforms.conf just define something like
[mylookup]
filename = mylookup.csv
then you can just search with search | outputlookup mylookup
You will need to restart splunk for this change to take effect
