Updating a value in a lookup

[joe06031990]

Hello,

I have a lookup called top sites with the bellow:

Name	Ip address
test1	10.10.10.10
test2	10.10.10.11
Test3	10.10.10.12
Test4	10.10.10.11
Test5	10.10.10.11

I am trying to update test3 IP address with the bellow:

| inputlookup topsites.csv | append [
|eval Name=Test3
|eval Ip address="9.9.9.9"] [|stats count by Name,Ip address]
| outputlookup
createinapp=true
topsites.csv

However it just adds another entry instead pf replacing the IP address value, what am I missing?

Thanks

[ITWhisperer]

Try something like this:

| inputlookup topsites.csv
| eval 'Ip address'=if(Name="Test3","9.9.9.9",'Ip address')
| outputlookup
createinapp=true
topsites.csv

[joe06031990]

Good Morning,

Thanks for your reply,

when I run the search it adds another column with the updated value called 'Ip address' instead of updating the existing field value, is there a way around this?

Thanks

Joe

[ITWhisperer · Accepted solution]

From your original post, it looks like the field is called 'ip address' - if this is not the case, then use the real field name instead of 'ip address'