Splunk Search

.CSV file and lookup field

HY
Explorer

Do I need to create a .csv file for the lookup field section of a saved search for CPU,memory by myself or I just need to go online to get the file?

Tags (2)
0 Karma

MichaelPriest
Communicator

You would need to create a csv file for the lookup yourself so it includes all of the values you want to use in the lookup. Once you have done this download and follow the instructions in the Knowledge Manager Manual located here:

http://docs.splunk.com/Documentation/Splunk/6.2.3/Knowledge/Addfieldsfromexternaldatasources

Starting from page 129.

woodcock
Esteemed Legend

You need to be much more specific but in general, you do need to create a lookup file.

Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...