Write a request

[gitingua]

Need help writing a request

file1.csv 

username	src_ip
John	192.168.16.35
Smith	172.167.3.43
Aram	132.56.23.3

file2.csv

IP address	ASN	Other
192.168.16.0/24	1234	RU
172.167.3.0/24	4321	AG
132.56.23.0/24	6789	BR

output 

username	src_ip	asn	other
John	192.168.16.35	1234	RU
Smith	172.167.3.43	4321	AG
Aram	132.56.23.3	6789	BR

Thanks guys !!!!

[nmohammed]

Hi @gitingua 

try this out, assuming you've these files uploaded as lookups

| inputlookup file1.csv 
| appendcols 
    [inputlookup file2.csv 
    |  fields ASN,Other ]
| table username,src_ip,ASN,Other

[gitingua]

@nmohammed 

No no no no. 

if the first three src_ip values match the IP address. then takes on these values

if src_ip(192.168.16.35) = IP address(192.168.16.0/24)

[nmohammed · Accepted solution]

file1.csv -- > csv based lookup

file2.csv -->  cidr based lookup (I've renamed "IP Address" field to ip_address) 

Add a new lookup definition, name it "file2"  and select file2.csv

Check on advanced options.  In "Match type"  type in "CIDR(ip_address)" .

| inputlookup file1.csv 
| fields src_ip, username
| lookup file2 "ip_address" as src_ip output ASN, Other