index=idx_proxy sourcetype="proxy"
| fields dest, src
| lookup iplisttest.csv address as src OUTPUT address as src_ip | search src_ip=* | stats values(dest) by src
This is what solved the problem, found by one of our engineers. Seems the lookup command did the trick!
Thanks All!
... View more