try this
| inputlookup Blackipfortinet.csv | join distip type=outer | search [ search index=fortinet | stats count(distip) as distip_count by srcip] | table srcip, distip_count
if not want the filed names of Blackipfortinet.csv as well. required matching filed from csv file, and same to be fortinet index to compare, based on you can get statistical data like count (distip) based on srcip.
... View more
Following error will be the wrong configuration in server.conf, double check the property of "mgmt_uri"
mgmt_uri = https://:
Error when getting master uri from target to do a rolling-restart Service Unavailable
... View more