I wanted to compare a Lookup with a Search: Ex: Lookup "list_host_lookup.csv" Server AA BB CC DD EE FF GG Search index=abcddf sourcetype | dedup Host | table HOST STATUS HOST STATUS AA Active BB Active CC Off DD Active GG Off HH Active II Off If the lookup host (list_host_lookup.csv) is not in the Search or if it is in the Search and is "Off", create a "NOK" field. If the lookup host (list_host_lookup.csv) is in the Search or if it is in the Search and is "Active", create an "OK" field. ... View more

Can I just upgrade the Splunk Enterprise deployment to version 9.0 in a Splunk Cluster environment? ... View more