Hello All,
Actually i have an lookup table DIUSERS.csv, i would like to build a query as like below :
index=* |inputlookup DIUSERS.csv|stats count by src dest user name action index
But its not working, Please let me know the correct queries.
Thanks.
What problem are you trying to solve with the lookup file? Debugging a query is difficult without knowing the goal.
Have you read the Search Reference manual to see the differences between inputlookup and lookup?