Splunk Tutorial: Lookup
# Create a csv file
colname1,colname2
<val1>,<val1> has been converted
<val2>,<val2> has been converted
index=_internal*
--------
log_level,colname2
INFO,INFO has been converted
WARN,WARN has been converted
-----
add this csv file to lookup table
& Give all Permission
---
index=_internal* log_level=* | lookup test.csv log_level OUTPUT colname2 | table log_level colname2
index=_internal* log_level=* | lookup lookup.csv log_level OUTPUT colname2 | table log_level colname2
Code language: HTML, XML (xml)
I’m a DevOps/SRE/DevSecOps/Cloud Expert passionate about sharing knowledge and experiences. I have worked at Cotocus. I share tech blog at DevOps School, travel stories at Holiday Landmark, stock market tips at Stocks Mantra, health and fitness guidance at My Medic Plus, product reviews at TrueReviewNow , and SEO strategies at Wizbrand.
Do you want to learn Quantum Computing?
Please find my social handles as below;
Rajesh Kumar Personal Website
Rajesh Kumar at YOUTUBE
Rajesh Kumar at INSTAGRAM
Rajesh Kumar at X
Rajesh Kumar at FACEBOOK
Rajesh Kumar at LINKEDIN
Rajesh Kumar at WIZBRAND
Find Trusted Cardiac Hospitals
Compare heart hospitals by city and services — all in one place.
Explore Hospitals