GOAL: determine if application server has logged based on a list of application ID codes
I have 2 csv lookups
Applicationlist.csv - contains: appID , appNAME
Applicationlist.csv is a subset of all applications listed in Applicationmetadata.csv.
Applicationmetadata.csv - contains: applicationID, applicationcode, appServerhostname , appServerIP,
*appID = applicationID. same data, different field name in each csv
* each applciation ususlly has more than 1 server
The index being refereed to collects not appserver logs, but server logging data. For example, the original index that the appserver logged to.
..... appmetadata, index(es)/sourcetype(s), Sorted by appID
* original_index and original_sourcetype are fields in the index that are linked to appServerhostname.
Thanks in advance for your help.