I configured externallookup definition with a script I built. However, the lookup command fails with the following message.
Error in 'lookup' command: The lookup table 'mylookup' does not exist o...
Have been trying to configure a lookup table with an external python script to no avail. Was trying to model it after the following article:
http://docs.splunk.com/Documentation/Splunk/4.3.1/K...
...in
And in transforms.conf I configured According this tutorial:
https://docs.splunk.com/Documentation/SplunkCloud/7.0.3/Knowledge/Configureexternallookups
[ip2location]
external_cmd = i...
...,69.61.106.93
www.somafm.com,64.147.167.20
Then I configured the trasnforms.conf:
and the props.conf:
[mydnslookup]
external_cmd = external_lookup.py host ip
external_type = python
f...
Hi all,
Everyone in my organization has a unique username, which I have extracted from my search as "anumber".
I want to construct an externallookup script to convert this "anumber" e...
Trying to fine tune Suspected Network Scanning since we are getting lots of false positives for our AD server doing DNS lookups and endpoints going to external sites that use lots of Akamai related I...
...ne field in a lookup file can have a time searchable format:
"
Configure a time-based lookup
File-based and externallookups can also be time-based (or temporal), if the field matching d...
We have a lookup table that is automatically updated every 15 minutes past the hour with external results (not in splunk). This needs to be pushed out to our clustered search heads members. How w...
Hi,
to support several externallookups to internet services with APIs I added a proxy configuration to splunk-launch.conf:
HTTP_PROXY=proxy.example.net:8080
HTTPS_PROXY=proxy.example.net:8...
...as a domain field. I also have a custom lookup that uses an external service and can verify if the provided domain is infected or not. This lookup returns two things: status (infected or not), c...