...pdated or newly created . How can i append the results of this search to my above csvlookup file in such a way that it does not create duplicates ? Basically if the user record a...
...ach time the search runs it will overwrite data in lookup containing only results from latest search.
I know outputcsv can create alookup file, but it there anyway to set the destination to my a...
Hi, how do i craft a search to match 2 fields from my raw events with 2 fields from aCSV file and output if one of the fields is different ? Requirement is to match the c...
hi! I have an alert, which when triggered it saves "Outputresultstolookup" csv file. Is there a way to have a dynamic filename where the data is saved? I.e. instead of one name results.csv I w...
...tatus_description as stat_desc | table stat_desc'
}, { tokens: true });
var stat = cell.value;
var stat_desc = mySearch.data("results");
$td.html...
Hi, Below is aresult of alookup command, how do I exclude the other information if I based in on BusinessUnit, For ex. I want to show BU2 only... but there maybe cases that I need to s...
...search of my data in Splunk, then outputa field named DNS, then lookup each DNS field in alookupcsv file and where there is a match it should output the corresponding Owner. Here is the search s...
i am currently migrating all the csvto kvstore.
when i do an inputlookup or outputlookup, it works perfectly fine and returns the results.
but when i use the lookup in my search it doesn't do t...
...n the index even if that number is zero.
I can get pretty close to what I want with this search:
index=whatever <base search here>
| lookup user.csv email as actor.email OUTPUT...