hi,
i have a main search-
|inputlookup wlaa_hosts.csv | eval Host=split(HostList,",") | stats count by Host
that results with-
Host count
host1 1
host2 1
host3 1
i have another lookup that looks like-
MetricID AlertMsg
response_time resp time > 10
error_count error > 20
i want to loop through each of the host and attach it to every row in the child lookup, so that the result looks like-
Host MetricID AlertMsg
host1 response_time resp time > 10
host1 error_count error > 20
host2 response_time resp time > 10
host2 error_count error > 20
final step is to output each row to a KV Store lookup
i tried using the `map` command but it did not give me the desired result. appreciate very much for any help. thnx
↧