Greetings. I am quite new to Splunk and read a lot of sources. However, I have a hard time to find my answer about the join and eval functions. I have a first search on an index. I want to filter this search with values of one field in a csv I import as lookup. Example: index="data" sourcetype="entities" | table EMAIL EXTERNAL_EMAIL CATEGORY And I have the inputlookup  inputlookup 20230904_NeverLoggedIn.csv How do I compare the field EXTERNAL_EMAIL from the index to the E_MAIL field in the csv file as a filter? Many thanks for the help. ... View more