Splunk Search

Translate ID to Name

RobertRi
Communicator

Hi

I'm using 4.1 and I want to translate an ID, which came from a search result, into a Name from an importet csv file. Is this possible and if yes how can I do this ?

Thanks Rob

Tags (1)
0 Karma
1 Solution

ziegfried
Influencer
0 Karma

ziegfried
Influencer

Yes, this is possible by using Splunk's lookup feature. See http://www.splunk.com/base/Documentation/4.1.5/User/Fieldlookupstutorial

0 Karma

ziegfried
Influencer

Bitteschön :winking_face: You can eliminate those events in the result by adding fieldname=* to the search criteria.

0 Karma

RobertRi
Communicator

Vielen Dank

Another question for my issue. If my search doesn't return a requiered field, how can I suppress this event

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...