Scripted lookup or command?

[vbumgarn]

Which is more efficient, a scripted lookup or a command?

I've written a piece of code as both, and the command is certainly easier to write, and I would never want to wire this particular lookup to run automatically, so unless the lookup is more efficient, I see no reason to not write the code as a command.

Thoughts?

[Kate_Lawrence-G]

splunk-base has a good pro and con list on this:

http://splunk-base.splunk.com/answers/3890/pros-and-cons-external-lookup-script-vs-custom-search-com...