About 373782073

373782073 · ‎01-21-2020

That worked great. Thanks a lot

373782073 · ‎01-13-2020

That's awesome, it works perfectly, now I just need to tweak it turn run on my search and extracted fields!

373782073 · ‎01-08-2020

Great. I was able to add the rex statement to my existing search and strip the info I wanted into separate fields. Thanks a lot!

arjunpkishore5 · ‎11-05-2019

There are multiple scenarios you use inputlookup For example: 1. | inputlookup <lookup file> This just outputs the content of the lookup file 2. <your search> |inputlookup <lookup file> append=true This appends the content of your lookup file to the end of your search results You can view more examples here - https://docs.splunk.com/Documentation/Splunk/8.0.0/SearchReference/Inputlookup Cheers

373782073 · ‎07-23-2019

I found that the following worked. | eval ValueY=case( match(Status, "StringValue_A") AND Priority == "StringValue_B", "StringValue_C") | table Status Priority ValueY thanks anyway

Posts	12
Solutions	1
Karma Given	0
Karma Received	2
Member Since	‎07-23-2019

Online Status	Offline
Date Last Visited	‎09-02-2021 12:20 AM

Sum of total files with same date

Working out % change of field value based on event...

Using regex on Extracted field

Using inputlookup to enrich results table with a c...

How to use conditional comparison of two field val...

Re: Sum of total files with same date

Re: Working out % change of field value based on e...

Re: Using regex on Extracted field

Re: Using inputlookup to enrich results table with...

Re: How to use conditional comparison of two field...

Are you a member of the Splunk Community?