Quantcast
Viewing all articles
Browse latest Browse all 47296

Substring lookup to enhance DB query results?

Hello, I am VERY new to Splunk. I have built some basic dashboards using DB queries, because the data is not (yet) being put directly into the Splunk database. With that said, I would like to enhance my current dashboard with some additional data defined in a CSV file. To be more specific my dashboard contains phone numbers. My CSV file contains the location data of North American Numbering Plan area codes and prefixes (NPA-NXX). I would like to lookup the location of the caller, based on the NPA-NXX, and include that in my dashboard. Given my limited knowledge/skill set with Splunk, I have a few questions: 1) Is this even possible in Splunk? 2) Does Splunk support data/format manipulation within the search string, such as using RegEx, or can you define a substring to look for? 3) Are there any existing tutorials around these areas that could help guide me to a solution? Any help would be greatly appreciated!! **EXAMPLE** (dots added for spacing purposes) [Query Results] Phone Number .......... Call Count +12345678901........... 12 [CSV Entry] NPA-NXX .................. Location 234-567 .................... Anytown, USA **Desired Output** Phone Number .............. Location .................................. Call Count +12345678901............... Anytown, USA ......................... 12

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>