Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
106 results
Sort by:
06-07-2017
10:50 AM
...p a [status] lookup with the following field definition:
"host","Error_Message","Error_Status","Time_Acknowledged"
The idea is that an administrator then uses a Workflow action to output the f...
07-15-2024
06:17 AM
Hello,
Anyone knows if we can use eval-ingest with lookup command in Splunk Cloud?
The problem is that in Splunk Cloud we can only add configuration via custom app in SH.
Eval-ingest in g...
Labels
- Labels:
-
configuration
10-19-2013
07:16 AM
...Now I want to automate this as good as possible and thought about the following solution:
a) Configure Splunk to monitor a folder in which I'd copy the new XML-file once it has undergone one or m...
- Tags:
- outputlookup
- xml
05-10-2023
07:21 AM
07-14-2021
08:07 PM
Hi, Under lookups we have lookups as below lookups abcd.csv xyz.csv I could see configs in props.conf to map to these lookups props.conf LOOKUP-field1-field2 = abcd_lookup field OUTPUTNEW f...
Labels
- Labels:
-
configuration
-
troubleshooting
02-27-2013
11:26 AM
...hich are not being used. We are using the "policy_id" column in the lookup csv:
index="summary" policy_id=*
| inputlookup append=t policywithdescs
| rename PolicyID as policy_id
| stats count b...
- Tags:
- lookup
08-10-2017
09:27 AM
I know that using inputlookup will use a CSV file but is it possible to have a script create the CSV file that inputlookup will use?
I know I can use a scripted lookup but this requires a...
11-04-2014
10:23 AM
...Add_a_lookup_stanza_to_transforms.conf (and on through the other steps)
So I have a csv file under $SPLUNK_HOME/etc/apps/search/lookups/users.csv
The format of the file is
user,"full_name"
u...
Show results in replies (3)
-
...nd Automatic lookups configured. The Lookup tables file will basically list the files you have i...
-
...imple CSV files, you don't even need to configure anything to use it at search time. Here some c...
-
...yntax from the Exploring Splunk book by David Carasso in the section called: "Comparing Results to Lookup...
01-27-2023
03:28 PM
...lready have the bucket matrix in a lookup csv file. I have played with using format command to generate the appropriate nested boolean AND/OR search logic with a foreach loop but foreach d...
Labels
- Labels:
-
development
-
using Splunk Enterprise
06-07-2018
06:09 AM
Hello,
I’d like to configure a wildcard usage for a lookup table, but unfortunately I’m not a Splunk guru and probably need a hand.
I have a lookup called "malware_domain_whitelist" with the U...
