Hello,
I have a lookup called top sites with the bellow:
Name | Ip address |
test1 | 10.10.10.10 |
test2 | 10.10.10.11 |
Test3 | 10.10.10.12 |
Test4 | 10.10.10.11 |
Test5 | 10.10.10.11 |
I am trying to update test3 IP address with the bellow:
| inputlookup topsites.csv | append [
|eval Name=Test3
|eval Ip address="9.9.9.9"] [|stats count by Name,Ip address]
| outputlookup
createinapp=true
topsites.csv
However it just adds another entry instead pf replacing the IP address value, what am I missing?
Thanks
From your original post, it looks like the field is called 'ip address' - if this is not the case, then use the real field name instead of 'ip address'
Try something like this:
| inputlookup topsites.csv
| eval 'Ip address'=if(Name="Test3","9.9.9.9",'Ip address')
| outputlookup
createinapp=true
topsites.csv
Good Morning,
Thanks for your reply,
when I run the search it adds another column with the updated value called 'Ip address' instead of updating the existing field value, is there a way around this?
Thanks
Joe
From your original post, it looks like the field is called 'ip address' - if this is not the case, then use the real field name instead of 'ip address'