See https://docs.splunk.com/Documentation/Splunk/7.2.1/SearchReference/lookup - in your case something like some search here | lookup StaticDNS.csv IP OUTPUT Hostname
inputlookup
is for loading the lookup's content as-is, not for enriching other events.
hi @mmercola
Did the answer below solve your problem? If so, please resolve this post by approving it! If your problem is still not solved, keep us updated so that someone else can help ya. Thanks for posting!
See https://docs.splunk.com/Documentation/Splunk/7.2.1/SearchReference/lookup - in your case something like some search here | lookup StaticDNS.csv IP OUTPUT Hostname
inputlookup
is for loading the lookup's content as-is, not for enriching other events.
index="network" sourcetype=aerohive search [| inputlookup StaticDNS.csv
I'm stuck after this point