Hi All, Is it possible to perform Eval then perform lookup ? If the eval return null then perform lookupA.csv. If eval return notnull, then perform lookupB.csv thanks!
Hi can anyone help me with a lookup table i have a 2 column lookup with column headings IPs and URLs, and i want to see if information in either csv field appears in the index data at a...
Hi,
I'm having an issue with a splunk lookup and I can't work out what the issue is. I have a lookup file, that among other things contains a mac address field and a hostname field
mac, n...
Hello All,
I just upgraded to the latest version of Splunk 7.2.5 and now when I search anything i recieve errors stating "Could not load lookup=LOOKUP-Browser"
I'm not sure what that is, I n...
Hi, There is an alarm monitoring the 4733(A member was removed from a security-enabled local group ) events. When this alarm is triggered, I want the user to be deleted from the users.cvs lookup...
Hi,
I'm a bit confused with the lookup command, I.e the syntax.
lookup <lookup-table-name> <lookup-field1> AS <local-field1>, <lookup-field2> AS <local-field2> O...
...wo errors per indexer:
Could not load lookup=LOOKUP-minemeldfeeds_dest_lookup
Could not load lookup=LOOKUP-minemeldfeeds_src_lookup
Can anyone point me in the right direction for a s...
Hello i have two lookup tables from the first i want to take the field "created_by" from the second i want to compare the "created_by" fields from the first lookup and check if the field "d...