Hi,
I have a .txt-file with line separated IP addresses, and I want to know if any of those have appeared in Splunk before.
I could manually enter all the IP addresses in search with "OR" between, but that would literally take weeks..
What to do?
Thanks, Simon
You could either index the file with splunk and reference it from there, or you could use a lookup. I would recommend you use a lookup, that way you can use the content of the file dynamically (i.e. update the info in it).