I'm a new user of Splunk 6.5.7. I have a search but only want results for 288 specific customerIDs. This would be a very long list of ORs and i don't think 6.5.7 supports an IN function. So I want a table output like with two columns from my search - CustomerName, CustomerID But only where the customerID is in my csv of customerIDs. I feel I should be able to do this using a lookup but just can't get it right. Anyone able to help please?
... View more