Hi Team,
I am new to splunk. and need help in validating data in a lookup
I have lookup and the data is like below
ci_list_lookup
sys_id name class_name
**xyz** Anil H
**abc** Anthony B
def **abc** ci
lmn nirav H
pqr **xyz** ci
Here the name column contains sys_id values. which I dont want
I want to create a lookup which looks like below
sys_id name class_name
xyz Anil H
abc Anthony B
def Anthony ci
lmn nirav H
pqr Anil ci
I tried using joins, Self joins but didn't work.
Please help me in getting the above output
↧
