Splunk Search

How to tag certain field-value pairs with multiple tags in bulk?


I need to tag certain field / value pairs with multiple tags. Is there a way to do this in bulk (i.e. upload a file or a visual tool)?

Tags (4)
0 Karma


Hi myahes,

take a look at the lookup function in Splunk http://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Aboutlookupsandfieldactions

cheers, MuS

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!