About Erfan

manjunathmeti · ‎04-17-2023

hi @Erfan, This is working for me, make sure your file contains data in the below format. There should not be any space b/w fields and values. src,dst,protocol,user,whitelisted 192.168.10.1,120.18.97.6,*,*,true 192.168.10.5,*,*,*,true *,*,https,bob,true

yuanliu · ‎04-03-2023

You can add as many wildcard lookup fields as needed. This is the instruction from Splunk Web (GUI) Optionally set up non-exact matching of a comma-and-space-delimited field list. Format is <match_type>(<field_name>). Available values for match_type are WILDCARD and CIDR. No need for CUI.

Posts	5
Solutions	0
Karma Given	2
Karma Received	0
Member Since	‎03-28-2023

Online Status	Offline
Date Last Visited	‎04-17-2023 10:00 PM

How to use wildcard in multi fields in lookup tabl...

How to create a look up table with "*&" or "any" f...

Re: Use wildcard in Multi fields in lookup table

Re: Look up table with "*" or "any&...

How to use wildcard in multi fields in lookup tabl...

How to create a look up table with "*&" or "any" f...

Re: Use wildcard in Multi fields in lookup table

Re: Look up table with &quot;*&quot; or &quot;any&...

Re: Look up table with "*" or "any&...