I have index =s1 with a field called city, and an uploaded CSV file with fields like "office", "latitude" and "longitude". I wanted to find matching values where city == office and then use input lookup's latitude and longitude to visualize a map.
My search now is like this but it's not working.
index=s1 | append [| inputlookup cosco_mapping.csv | rex field=formatted_address "^(?<city>[^,]++)" | fields city, latitude, longitude ] | rex field=group_name "^(.*[\\\\])(?<office>.+)" | table office, city, latitude, longitude | where office==city | geostats latfield=latitude longfield=longitude count