<html> Hello If you look at the search manual, one of the restrictions is the inputlookup command. [Search manual] Restrictions for standard mode federated search Standard mode federated search does not support the following: Generating commands other than search, from, loadjob, mstats, or tstats. For example, federated searches cannot include the datamodel or inputlookup commands. You can find a list of generating commands in Command types, in the Search Reference. Is this inputlookup a constraint on local Splunk? Or is it a remote restriction? Thank you </html>
... View more