consequence of lookup command with or without OUTPUT parameter

[ankithreddy777]

What is the difference between with or without using OUTPUT parameter in lookup command.

[s2_splunk]

From the documentation

Usage
When using the lookup command, if an OUTPUT or OUTPUTNEW clause is not specified, all of the fields in the lookup table that are not the match field are used as output fields. If the OUTPUT clause is specified, the output lookup fields overwrite existing fields. If the OUTPUTNEW clause is specified, the lookup is not performed for events in which the output fields already exist.

[somesoni2]

Without OUTPUT it'll return all the fields from the lookup table.