Splunk Search

LOOKUP table: How to add id field  name.csv file?

abi2023
Path Finder

I have two lookup table call name.csv and id.csv. both has matching field call fullname.
id.csv file has id field but name.csv doesnot. but I want to add id field to name.csv. Is anyone know how to add id field  name.csv file.
I try

| inputlookup name.csv | lookup id.csv fullname output id 

but it didnot work.

Labels (3)
Tags (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @abi2023,

as @ITWhisperer said, your search should work!

did you created the Lookup Definition for the id.csv lookup? [Settings > Lookups > lookup Defintion]

which kind of issue are you reporting?

  • not all the records match,
  • no records march?

In other words, could you better describe your issue?

Ciao.

Giuseppe

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

It looks like it should work. Can you provide examples of where it does not work and where it does work (if at all)?

0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...