Does csv file accepts * symbol for lookup? - Splunk Community

Splunk Search

I have apis which has params in between and trying to match the api from csv but it doesnt show when using lookup.

eg : /serviceName/api/127364/api which is shown in access logs
i have /serviceName/api/*/api in my csv file.

Any idea how this works?

You have to create a lookup definition with WILDCARD matching

Define a CSV lookup in Splunk Web - Splunk Documentation

Get Updates on the Splunk Community!

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...

Updated Team Landing Page in Splunk Observability

We’re making some changes to the team landing page in Splunk Observability, based on your feedback. The ...

New! Splunk Observability Search Enhancements for Splunk APM Services/Traces and ...

Regardless of where you are in Splunk Observability, you can search for relevant APM targets including service ...