Splunk Search

using inputlookup command on csv file

v709587
Explorer

alt text

Hi,
I am new to Splunk.
Attached screenshot is the data of my csv file. Please provide me a query to display the value of Field 3 for corresponding Field1 and Field2 values using inputlookup or lookup command.

Regards,
Vandana

Tags (1)
0 Karma
1 Solution

v709587
Explorer

I found the answer:
|inputlookup file.csv | where Colum1="$Column1$" AND Column2="$Clomun2" | return $Column3

View solution in original post

0 Karma

v709587
Explorer

I found the answer:
|inputlookup file.csv | where Column1="$Column1$" AND Column2="$Column2$" | return $Column3

0 Karma

v709587
Explorer

I found the answer:
|inputlookup file.csv | where Colum1="$Column1$" AND Column2="$Clomun2" | return $Column3

0 Karma

ashmaind
Explorer

| lookup lookup_name field1, field2 OUTPUTNEW field3

0 Karma

somesoni2
Revered Legend

See this on how to upload your csv file as lookup table file.
https://docs.splunk.com/Documentation/Splunk/7.2.3/Knowledge/Usefieldlookupstoaddinformationtoyourev...

Once you've the lookup table in your Splunk instance, you can use the lookup table as described here:
https://docs.splunk.com/Documentation/Splunk/7.2.3/SearchReference/Lookup

0 Karma

richgalloway
SplunkTrust
SplunkTrust

What have you tried so far? What results did you get?

---
If this reply helps you, Karma would be appreciated.
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...