Splunk Search

Splunk Query

pratapa
Explorer

The Splunk report below returns ‘shipping points’ (warehouse codes). Using the lookup table (also below), our job is to sent relevant Splunk results for a shipping point, to the appropriate warehouse group defined in the lookup table.

SPLUNK QUERY

index=webmethods_nonprd CESAP.pub.Shipment.handler:processShipment_PostalMailProvider OR CEAustraliaPost.sub.Shipment.handler | transaction shipment | search NOT (linecount="3" AND "Published shipment document" AND "Successfully created Australia Post shipment order" "Generated Australia Post shipment order summary and archived it in the SAP content repository") | fields shipment, point, delivery

LOOKUP TABLE

Shipping Point (Warehouse Code) Alert Email of Warehouse Group

2000 distenqdesk@xyz.com

3000 distenqdeskvic@xyz.com

4000 distenqdesksouthqld@xyz.com

6000 distenqdeskwa@xyz.com

7020 distenqdesktas@xyz.com

8000 distenqdeskNT@xyz.com

The Splunk report below returns ‘shipping points’ (warehouse codes). Using the lookup table (also below), our job is to sent relevant Splunk results for a shipping point, to the appropriate warehouse group defined in the lookup table.

Could you please advise the ‘right’ way to do this? (e.g., using Splunk lookup table functionality).

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...