All Apps and Add-ons

Importing KV store values from ITSI to a lookup file in splunk

pkol
Explorer

Hey guys,
There is a certain mapping present between two multi-valued variables inside ITSI , I would like to use this mapping as a lookup in splunk.
Is there any way I can get this mapping into splunk in lookup tables, so that I can just use inputlookup command to get the mapping table.
I believe the config files are involved in this process and if so how do I access these files. Can someone point me in the right direction please. I am new to splunk
Thank you.

0 Karma

mdonnelly_splun
Splunk Employee
Splunk Employee

This document covers how to use lookups with KV Store data, including use with the inputlookup command:
http://dev.splunk.com/view/webframework-developapps/SP-CAAAEZH

0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...