Splunk Search

DB COnnect Lookup setup

SS1
Path Finder

Hello SPlunkers,

For DB connect lookup

I have reference search with below format,

2020-11-13 01:14:12 * PUT /packages/version/323 - 8080 userX Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 * 200 0 0 31

 

I have a set lookup SQL as below,

Id           Name
323    ApacheMaven

 

I want to match the ID in from the reference search with the lookup and send out the results as ID, Name, User. Please let me know if we can achieve that

Labels (6)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Please describe the problem more.  The "search" is not a search, but raw data or, perhaps, a result of a search.  What is the search itself?  Are fields already extracted?

The "SQL as below" is not SQL at all, but what looks like the output of SQL.  What command(s) were used to produce that output?

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...