...ut Customer="Frank's Artichokes" is not. I can't add all customers to the table. I have tried many forms of the lookup. I can get a list with the original Customer name a...
...ike toadd the userID, session_start, session_end fieldsfrom the event into the login_sessions.csv lookup, and if the value is "logoff" then I would like to remove the existing e...
Hi all,
I know many questions exist similar to this one but none are useful for my particular use case. Please if somebody could advise me on how to do this, I'd appreciate it!
I have a lookup...
...be able to put a name/email address to the subscription. I have a lookuptable configured which has the fields subscriptionID, subscriptionName, and subscriptionContact. I have attempted touselookup...
...ot just when the table is being used.
There are 3 fields: ACCT, AUID, ADDR.
It is quite possible that a user may login from another PC, so I need to keep entries where the ACCT and AUID are the s...
We recently updated our Splunk add-on for Windows to 5.0.1, whenever searching we receive the error "Could not load lookup=LOOKUP-app4_for_windows_security" from all of our indexers and search head....
...bsp;
My lookuptable is simply a list of:
Full Name
E-mail Address
I want to just see events where the EnrollmentEmailAddress matches an email listed in the "E-Mail Add...
I have a lookuptable geo-lookup.csv which has data in the format:
IP, Coordinates, Location.
My search has the field ipAddress which is used as the filter to match the IP field in the table. I...
I have a lookuptable sample_lookup.csv which consists of two fields, wildcard and location
wildcard location
*123* ABC
*456* DEF
I would like toadd the l...