Splunk Search

Splunk Query

pratapa
Explorer

The Splunk report below returns ‘shipping points’ (warehouse codes). Using the lookup table (also below), our job is to sent relevant Splunk results for a shipping point, to the appropriate warehouse group defined in the lookup table.

SPLUNK QUERY

index=webmethods_nonprd CESAP.pub.Shipment.handler:processShipment_PostalMailProvider OR CEAustraliaPost.sub.Shipment.handler | transaction shipment | search NOT (linecount="3" AND "Published shipment document" AND "Successfully created Australia Post shipment order" "Generated Australia Post shipment order summary and archived it in the SAP content repository") | fields shipment, point, delivery

LOOKUP TABLE

Shipping Point (Warehouse Code) Alert Email of Warehouse Group

2000 distenqdesk@xyz.com

3000 distenqdeskvic@xyz.com

4000 distenqdesksouthqld@xyz.com

6000 distenqdeskwa@xyz.com

7020 distenqdesktas@xyz.com

8000 distenqdeskNT@xyz.com

The Splunk report below returns ‘shipping points’ (warehouse codes). Using the lookup table (also below), our job is to sent relevant Splunk results for a shipping point, to the appropriate warehouse group defined in the lookup table.

Could you please advise the ‘right’ way to do this? (e.g., using Splunk lookup table functionality).

0 Karma
Get Updates on the Splunk Community!

Celebrating the Winners of the ‘Splunk Build-a-thon’ Hackathon!

We are thrilled to announce the winners of the Splunk Build-a-thon, our first-ever hackathon dedicated to ...

Why You Should Register for Splunk University at .conf25

Level up before .conf25 even begins Splunk University is back in Boston, September 6–8, and it’s your chance ...

Building Splunk proficiency is a marathon, not a sprint

Building Splunk skills is a lot like training for a marathon. It’s about consistent progress, celebrating ...