Splunk Search
Highlighted

How can I use lookup as a filter?

Builder

Hello
When the value of lookup equal to result of event = do not show that event.
How to create kinda search?

Highlighted

Re: How can I use lookup as a filter?

SplunkTrust
SplunkTrust
... NOT [|inputlookup lookupname | fields field1 field2 | format]

View solution in original post