Hi,
I am new to Splunk.
Attached screenshot is the data of my csv file. Please provide me a query to display the value of Field 3 for corresponding Field1 and Field2 values using inputlookup or lookup command.
Regards,
Vandana
I found the answer:
|inputlookup file.csv | where Colum1="$Column1$" AND Column2="$Clomun2" | return $Column3
I found the answer:
|inputlookup file.csv | where Column1="$Column1$" AND Column2="$Column2$" | return $Column3
I found the answer:
|inputlookup file.csv | where Colum1="$Column1$" AND Column2="$Clomun2" | return $Column3
| lookup lookup_name field1, field2 OUTPUTNEW field3
See this on how to upload your csv file as lookup table file.
https://docs.splunk.com/Documentation/Splunk/7.2.3/Knowledge/Usefieldlookupstoaddinformationtoyourev...
Once you've the lookup table in your Splunk instance, you can use the lookup table as described here:
https://docs.splunk.com/Documentation/Splunk/7.2.3/SearchReference/Lookup
What have you tried so far? What results did you get?