Ok,
I am sure there is something here about this already, but I have looked for it and just can not seem to find it.
I am looking to run a search on a csv file that is populated with web addresses and IP Addresses to see if any we have hit in of these sites. I have the CSV file set in UTF-8 coding and looks like this:
Websites
"Http://www.google.com"
"Http://www.yahoo.com"
"10.1.1.1"
Now I want to compare this to a sourtype called Gateway and have tried to following search and can't seem to get any results (even though I search for the website without the inputlookup command and it is triggered)
sourcetype=gateway | inlookup Websites.CSV | stats sparkline count values(src_ip) as src_ip by domain
Any help would be appericiated! Thank you!
... View more