How to create query for multi value attribute?

[spisiakmi]

Hi, can I ask you for helping me with this small problem, please?

If I read the content of the lookUp using any criteria I receive attribute Attr1. This Attr1 is multivalue attribute.

Attr1

7470486

7470487

7470597

7470543

I want to create query, where will be index=test ID=7470486 OR 7470487 OR 7470597 OR 7470543

[somesoni2 · Accepted solution]

Try something like this

index=test [| inputlookup yourlookup.csv | where...your criteria.. | table Attr1 | rename Attr1 as ID]

[spisiakmi]

Hi somesoni2,

this is amazing simple. Absolutely perfect. Thank you very much. Works fine.