Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

What are the differences between the lookup and inputlookup commands?

$
0
0
Is there any reason why this command would work: | inputlookup myfile | search SERIAL_NO "1234" | table X, Y, Z And this command would work: index=mydata serial_number="1234" | table subject But this command would not work: index=mydata serial_number="1234" | lookup myfile SERIAL_NO as serial_number output X, Y, Z | table subject, X, Y, Z And by "not work", I mean that the table command produces a result with "subject," but no X, Y, or Z..... the lookup is failing.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>