Activity Feed
- Posted Re: check if url in a lookup match logs on Splunk Search. 02-10-2025 12:38 AM
- Karma Re: check if url in a lookup match logs for yuanliu. 02-10-2025 12:37 AM
- Posted Re: check if url in a lookup match logs on Splunk Search. 02-07-2025 07:40 AM
- Posted check if url in a lookup match logs on Splunk Search. 02-07-2025 07:17 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 |
02-07-2025
07:40 AM
Hello @gcusello, Thanks for your answers, I have tried this the issues is that I want too output the number of hit on domain in the lookup and if I do a raw search it will also catch Referer or other field. KR Théo
... View more
02-07-2025
07:17 AM
Hello, I have a lookup with url like url www.url.com .url.com site.url.com And i try to match it with my proxy logs to check if users access it. But i have issues with ".url.com" since it don't exactly matches the hostname. I have tried to replace them with "*.url.com" but splunk lookup don't match wildcard. I have tried things like this but nothing worked : | inputlookup all_url.csv | rename url as lookup_url | join type=inner [ search index=my-proxy | eval lookup_url="*" . lookup_url . "*" | search hostname=lookup_url ] Do you have any idea ? Thanks
... View more
