Hi
I have separate machines for a Search Head and Indexer. InSplunkWeb on the Search Head, I went through the different steps as shown in the Splunk tutorial to defineautomaticlookup based o...
...enerates the output file.
My question is, how do I get the lookup table to update automatically whenever a new file is placed in the specified location?
If I define a lookup using the Web GUI, would t...
...he DB Connect App. What do I have to do to make it available globally? I found the lookupdefinition created by DB Connect and changed the permission to global but I still get the following error w...
I'm using lookup but don't know how to do a partial match instead of an exact match
Example: 10.20.30.40 is in the list, and I want to get the result of URL=https://10.20.30.40~, is that possible?
Hi, I'm trying to get wildcard lookups to work using the "lookup" function. I've followed guidance to set up the "Match Type" for the fieldin the lookupdefinition as per Define a CSV lookupinSplunk...
Hi, so my team is currently has some data on Splunk cloud. My task is to use your REST API to get this data using python.
On Splunkweb I get this data by using the following query:
&n...
...ummary index for when type=alert and have an email generated containing all the fields for that event.
The problem is others using this search head have defined many different automaticlookups t...
Hi
from below events how to convert epoch time to a desired time zone
want to convert LAST_START="1670326641", LAST_END="1670326670", NEXT_START="1670412600", into desired time zone b...
Creating LookupDefinition (transforms stanza) can be done on SplunkWeb UI. But since we need to point a kv definition to a collections.conf, we must have that stanza in collections.conf. How do w...