Can I use lookup in a range value situation ? For example, the IP address: 10.0.1.0/24 for A area 10.0.2.0/24 for B area when I input a single ip 10.0.1.2 in search bar，the lookup command will return A area. If this can be done,how to configure it in splunk? ... View more

I am going to monitor file change on several servers,but I don't like the way of sharing directory .so I installed a sync software on these servers. When there is a file change,The change file was sync to a server for central management.And i use splunk to monitor the single server.After some time, i found that the index volume was overhead:the files was about 50M in total,but the index volume is 5G in a day. the files name did not change during the sync process.but everytime the sync process delete the oldfile and create a new file with the same name? Is this the reason of index overhead? ... View more