I have a file (servers.csv) with a set of server addresses, e.g.
1.2.3.4
4.3.2.1
5.6.7.8
I uploaded the file, and I am trying to use an inputlookup to find relevant logs to any address. My query does not work:
index="palo_logs" [|inputlookup servers.csv | return src_ip ]
The columns on my csv file are:
src_ip,servername
I can't for the life of me have the query populate, but when I search for the src_ip independently, it shows up.
↧