Splunk Search

Splunk Query

pratapa
Explorer

The Splunk report below returns ‘shipping points’ (warehouse codes). Using the lookup table (also below), our job is to sent relevant Splunk results for a shipping point, to the appropriate warehouse group defined in the lookup table.

SPLUNK QUERY

index=webmethods_nonprd CESAP.pub.Shipment.handler:processShipment_PostalMailProvider OR CEAustraliaPost.sub.Shipment.handler | transaction shipment | search NOT (linecount="3" AND "Published shipment document" AND "Successfully created Australia Post shipment order" "Generated Australia Post shipment order summary and archived it in the SAP content repository") | fields shipment, point, delivery

LOOKUP TABLE

Shipping Point (Warehouse Code) Alert Email of Warehouse Group

2000 distenqdesk@xyz.com

3000 distenqdeskvic@xyz.com

4000 distenqdesksouthqld@xyz.com

6000 distenqdeskwa@xyz.com

7020 distenqdesktas@xyz.com

8000 distenqdeskNT@xyz.com

The Splunk report below returns ‘shipping points’ (warehouse codes). Using the lookup table (also below), our job is to sent relevant Splunk results for a shipping point, to the appropriate warehouse group defined in the lookup table.

Could you please advise the ‘right’ way to do this? (e.g., using Splunk lookup table functionality).

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...