I have the following Query:
index=obh_prod sourcetype=obh:edge:api proxy!="ow*" |
lookup blink_six_providers ProviderId as pxrq_h_x-corapi-target-id
OUTPUT ProviderId ProviderName | fillnull value=target_id ProviderId ProviderName | dedup ProviderName ProviderId | table ProviderId ProviderName
If no values are found ProviderId, ProviderName should both get the value of pxrq_h_x-corapi-target-id.
If actually now produces:
ProviderId ProviderName
pxrq_h_x-corapi-target-id | pxrq_h_x-corapi-target-id | IIDP06300 | Valiant Bank AG | IIDP00761 | Aargauische Kantonalbank
If should produce the following if the xrq_h_x-corapi-target-id e.g. contains IIDP099999 and this value is not found in the lookup. How do I get the contents of the variable and not the name of the variable itself? ProviderId ProviderName
|
If should produce the following if the xrq_h_x-corapi-target-id e.g. contains IIDP099999 and this value is not found in the lookup. How do I get the contents of the variable and not the name of the variable itself?
ProviderId ProviderName
IIDP099999 | IIDP099999 |
IIDP06300 | My Bank AG |