I am trying to output the results of the SPL query to lookup file via OUTPUTLOOKUP command in query itself using SPLUNK Alerts.
(I am not using the alert function to send the data to CSV as I have conditional state to output the data to CSV)
It works intermittently and there are times that when data is not getting added to CSV unless manual run of query.
Can someone please assist or share some inputs?
↧