Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
11 results
Sorted by:
12-09-2021
03:27 AM
Hi, I'm trying to get wildcard lookups to work using the "lookup" function. I've followed guidance to set up the "Match Type" for the fieldin the lookup definition as per Define a CSV lookup in Splunk...
Labels
- Labels:
-
lookup
10-19-2015
03:05 PM
2 Karma
...enerates the output file.
My question is, how do I get the lookup table to update automatically whenever a new file is placed in the specified location?
If I define a lookup using the Web GUI, would t...
08-13-2015
10:29 AM
Hi
I have separate machines for a Search Head and Indexer. In Splunk Web on the Search Head, I went through the different steps as shown in the Splunk tutorial to define automatic lookup based o...
05-18-2017
10:45 PM
I have a lookup table as below
User IsMember
user1 Yes
user2 Yes
user3 No
I save the table as memberlist.csv save as type is CSV(comma delimited)(*.csv)
I import the table and define...
- Tags:
- lookup
02-10-2022
02:42 PM
...earch index=* src_ip=* followed by the lookup. I added the lookup file and lookup definition but when I run a search it fails saying the lookup table doesnt exist.
Labels
- Labels:
-
lookup
03-17-2021
10:24 AM
Hello Splunkers! We have a situation here and need your help and experience. We are looking for best practice to work with Large CSV files (1Million Rows at least) to produce fast searches a...
Labels
- Labels:
-
other
03-03-2021
02:24 PM
We need to run the same query over a list of values (10k to 100k) without knowing the exact key across various indexes where they might show up. What's the best way to do this in a scalable w...
04-06-2015
08:52 AM
1 Karma
...ooling, etc).
For .csv files that I want to index (so that all search heads can get to the data), where should I upload the files? I typically use the WebUI to upload these types of files, so s...
05-23-2020
11:10 AM
I'm seeing the error below under messages in my Splunk enterprise console:
Missing or malformed messages.conf stanza for TCPOUT:FORWARDING_BLOCKED_Indexer IP ADDress_default-autolb-group DC-Host N...
- Tags:
- splunk-enterprise
