Splunk Search
Highlighted

Avoid .csv extension while doing outputlookup / creating lookup file

Path Finder

Hi ,

How to avoid .csv extension while i am mentioning lookupfile name in outputlookup

Ex : ..search | outputlookup mylookup.csv

In need lokkupfile name as mylookup
Tags (3)
0 Karma
Highlighted

Re: Avoid .csv extension while doing outputlookup / creating lookup file

Champion

In transforms.conf just define something like

[mylookup]
filename = mylookup.csv

then you can just search with search | outputlookup mylookup

You will need to restart splunk for this change to take effect

Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.