Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Why are two of my columns empty in a table returned by a lookup file with multiple fields?

$
0
0
I used a lookup file which is configuring like this field1, field2, field3, field4 value1, value2, value3, value4 value10, value2, value3, value4 value11, value2, value3, value4 I would like to obtain the results in a table where i count the quantity of the first field. field2 field3 field4 field1 value2 value3 value4 3 I tried this search: my search | lookup mylookup field1 output field2, field3, field4 | chart count by field2 | table field2 field3 field4 nb but columns field3 and field 4 are empty where is my mistake ?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>