If you create a lookup definition, you can enable wildcard lookups. I'd also make the proxy logs the primary search and use the lookup as search query parameters, have a second field in your CSV for...
See more...
If you create a lookup definition, you can enable wildcard lookups. I'd also make the proxy logs the primary search and use the lookup as search query parameters, have a second field in your CSV for inScope and mark them all as yes and then do the lookup with the definition wildcard. url,inScope
url1.com,Yes
*.url2.com,Yes
site.url3.com,Yes The lookup definition (url_list) will have WILDCARD(url) in the Match Type. The search would look like : index=my-proxy
[| inputlookup url_list
| rename url as query
| fields query]
| lookup url_list url
| where match(inScope, "Yes") This takes all the values you have in your url CSV and uses them as filters on your proxy logs. Then you lookup the urls in the logs to make sure they're exact matches to your list and not just other urls that might contain your urls somewhere else in the log.