How to search for IP addresses from a .txt file to see if any of them have appeared in Splunk before?

[simeidem]

Hi,

I have a .txt-file with line separated IP addresses, and I want to know if any of those have appeared in Splunk before.

I could manually enter all the IP addresses in search with "OR" between, but that would literally take weeks..

What to do?

Thanks,
Simon

[jeffland]

You could either index the file with splunk and reference it from there, or you could use a lookup. I would recommend you use a lookup, that way you can use the content of the file dynamically (i.e. update the info in it).