Hi,
I have logs in one database which I have importing through db input through splunk and it's working fine. Now in this input log, one column has a number value. I have created db lookups which map this column number with another table's field which has respective values.
How can I use this dblookups during the db input times so it can create the new field with respective values from db lookup table?
Got the answer. Just used the Join statement in db input configuration as both table was on same database.
Got the answer. Just used the Join statement in db input configuration as both table was on same database.