Hi great knowledgeable splunkers!
I have a number of queries that I need to chain in specific order so that static lookup tables are updated properly.
For example, imagine I had 10 or so of these that need different updates
| inputlookup ref_data_mac_address_daily.csv | search NOT [ref_macaddresses_all_time.csv
| fields src_mac] | outputlookup ref_data_new_data.csv
|input lookup ref_data_new_data.csv| search <for something| outputlookup ref_cleandata.csv
Is there a simple way to call 10 or more queries in a row as one scheduled task? (without having to write an external script?)
cheers,
ag
... View more