Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Is it possible to exclude search results with two lookup files?

$
0
0
Hi,all I'm sorry but I use lookup for the first time. Is it possible to exclude search results with two lookup files? Create a host name lookup file. (HOST.csv) Create a lookup file for the service name. (NAME.csv) First, exclude the hostname first. index = main source = host NOT [| inputlookup HOST.csv] What type of search statement would you like to exclude further service names from this search result? I thought like this. (index = main source = host NOT [| inputlookup HOST.csv]) NOT [inputlookup NAME.csv] Could you help me?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>