Does csv file accepts * symbol for lookup? - Splunk Community

Splunk Search

I have apis which has params in between and trying to match the api from csv but it doesnt show when using lookup.

eg : /serviceName/api/127364/api which is shown in access logs
i have /serviceName/api/*/api in my csv file.

Any idea how this works?

You have to create a lookup definition with WILDCARD matching

Define a CSV lookup in Splunk Web - Splunk Documentation

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...