About pablo_sanchez

pablo_sanchez · ‎06-24-2020

Hi Luke, I know the question my be self-answered but I just thought I post it here anyways. The Lookup File Editor app version 3.4.2 seems to be available for Splunk Cloud and actually seems to work for some users, but we found not to be responsive for some others where users cannot save or create new lookups, etc. Before we have a 3.3.x version of it and it was working flawless. Is it that the 3.4.2 or newer is still not working properly for Splunk Cloud?

pablo_sanchez · ‎05-18-2020

use a lookup table. (csv file) Add all your data into a file called .csv The file will content something along these lines: IP, description 54.123.123.123, MyExternalMailServer then you can call it using the inputlookup command. | inputlookup filename.csv You can create your alert based on this file. You can even populate this file automatically from a saved search using the ouputlookup command to do it. Thanks,

pablo_sanchez · ‎05-14-2020

Much appreciated!

pablo_sanchez · ‎05-14-2020

Is there an specific way to submit a feature request for your app? Dont think it has to be done through Splunk Support Portal, is it? Please advise.

pablo_sanchez · ‎05-14-2020

Thanks Luke. We will request it. We will be using it more if that's the case.

pablo_sanchez · ‎05-13-2020

Wanted to ask the following, hopefuly getting an answer from Luke M. but anybody else's comment is appreciated. So I've installed the 'Google Import/Export' app (https://splunkbase.splunk.com/app/2630) and it's working pretty good for what is intended. I am able to export data from Splunk to Google Sheets. The problem I am facing is that when exporting a lookup table from Splunk which contains numbers, the numbers go to the google sheet as strings. For example, if the number was a 15 in the lookup table, when it shows up in Sheets it will be '15. And sheets is treating it as a string. Is there a recommendation on how to get around that?

pablo_sanchez · ‎05-05-2020

You're correct. overlooked it. Perhaps using OR instead will do it. Worked for me on a similar query. your search | where isnotnull(ErrorDetail) OR isnotnull(ErrorMessage) | stats count by ErrorDetail ErrorMessage

pablo_sanchez · ‎05-01-2020

This should work better. Let me know your search | where isnotnull(ErrorDetail) AND isnotnull(ErrorMessage) | stats count by ErrorDetail ErrorMessage

Posts	8
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎01-29-2020

Online Status	Offline
Date Last Visited	‎09-20-2021 12:27 PM

Lookup File Editor on Splunk Cloud

Google Sheet import/export app

Lookup File Editor on Splunk Cloud

Re: Best Method of Associating External IP with a ...

Re: Google Sheet import/export app

Re: Google Sheet import/export app

Re: Google Sheet import/export app

Google Sheet import/export app

Re: How to ignore fill null values in the result?

Re: How to ignore fill null values in the result?

Are you a member of the Splunk Community?