- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to match strings that in a text .file with my logs that indexed?
hi.
I have a txt file include many strings, and many logs from my web server that indexed.
I want to find the logs that at least match with one of the string in txt file.
how to search and query for this goal?
thanks.
for example:
txt file:
mosConfig.absolute.path
and logs:
http://localhost/index.php?option=com_sef&Itemid=&mosConfig.absolute.path=[shell.txt?]
and output:
http://localhost/index.php?option=com_sef&Itemid=&mosConfig.absolute.path=[shell.txt?]
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Put the text file into a lookup store e.g. csv and then use inputlookup to include it in the search of your index - start with something like this - you will need to expand on this with your real values
index=xyz [|inputlookup text.csv|format]
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
thanks, but the lookup table should have at least two column. so I have one column!?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

If you are looking something up, then yes you would expect there to be at least two column, but if you are just doing inputlookup you can have just one column
