Splunk query to use lookup data as a field value

[umesh]

Hi,

I have a lookup file which has ClientName,ostype,currentforwarderversion  

I wanted to know which Client is reporting to which deployment server. 

can we have a query to find and how to use the client name as a filed value in the query 

Thanks

[ITWhisperer]

The simple answer to the generic question is: yes, you probably can have these things.

However, for a more specific answer, you will need to provide more detail - what events do you already have? what have you already tried?