Splunk Search

Error search

sanjds
New Member

i have look table with known errors and planning to create job which runs on cron schedule and provide me list of error with high count ( example error 1, error 2, error 3). Do we know way to compare my error ( error 1 , error 2 , error 3) with lookup table , get a result if these error 1,2,3 were not matching with my known errors from my lookup table ?

Tags (1)
0 Karma

JPaule
Explorer

search for errors here | join key [inputlookup error_lookup] | table *

0 Karma
Get Updates on the Splunk Community!

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...