Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Inputlookup and match only whole word in field text

$
0
0
I want to use a keyword list (inputlookup) to find a keyword (**whole word only !**) in the event text. Sample Event text (field name is 'data'): Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aliquam pretium urna vel auctor tempus. Integer velit libero, faucibus id ex. I've imported a csv file containing keywords. Keyword adipiscing faucibus The inputlookup works fine: | imputlookup keywords.csv Searching for just a keyword works fine: index=lorum adipiscing Using inputlookup with the csv file doesn't work (no matches): index=lorum [| imputlookup keywords.csv] Any help writing my query is highly appreciated.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>