Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

lookup with multiple values in one field will work?

$
0
0
hi all, I am wondering if there is a way in lookup tables for "key=value" should be "group=value1,value2,value3,value4" for ex., if I have below query and try to search for group using multiple values all at once or just by taking value1 and value3 or just value1. (callingPartyGroup="value1" OR originalCalledPartyGroup="value1" OR finalCalledPartyGroup="value1") and (callingPartyGroup="value1,value2" OR originalCalledPartyGroup="value1,value2" OR finalCalledPartyGroup="value1,value2") right now by default I am only using one value at a time I wanted to search using multiple values from lookup groups.csv? Number Group +20190601 value1,value2,value3,value4 +20190608 value1,value2,value3,value4 +20190615 value1,value2,value3,value4 is it possible

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>