Splunk Search

How to prepend entry in lookup

saurabhatsplunk
New Member

Hi All,

I want to add entry on first row of my lookup. I know how to append the entry using outputlookup but is there any way to prepend the entry on first row in lookup?


Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @saurabhatsplunk ,

the order is the one you have in your result list before the outputlookup command ,

so, the correct questiojn is: how to add a the first position in the result list?

if you coult share your search I could help you.

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...

AI Adoption Hub Launch | Curated Resources to Get Started with AI in Splunk

Hey Splunk Practitioners and AI Enthusiasts! It’s no secret (or surprise) that AI is at the forefront of ...