Hi, I have a variety of CSV lookup tables and have to add a field to each of these tables. The CSV files are used by scheduled searches, so I need their contents AND the field names. table1.csv: index,sourcetype index1,st1 table2.csv: sourcetype,source st1,source1 table3.csv: field1,field2 - no rows For this, I use the following spl: | inputlookup table1.csv | table index,sourcetype,comment1 | outputlookup table1.csv | inputlookup table2.csv | table sourcetype,source,comment2 | outputlookup table2.csv | inputlookup table3.csv | table field1,field2,comment3 | outputlookup table3.csv For table1 and table2, this works. But for table3, I have the problem that outputlookup creates an empty table and the field names are missing. Is there a search that can extend empty and filled lookups? Thank you.
... View more