I am trying to create a search that returns events where a field's value equals any value from a specific column of a lookup table...
Lookup Table:
Account, Email, User
abc,
[email protected], a
def,
[email protected], d
ghi,
[email protected], g
Desired Search:
Index=myIndex act="abc" OR act="def" OR act="ghi"
My lookup table has hundreds of rows. How do I perform this simple search where the field "act" can equal any value from the "Account" column in my lookup table? Thanks in advance for the help!
... View more