I'm trying to make a join using a lookuptable and a query from a index
With lookup table
And the SPL are don't bring the information correct
The commnad that I'm trying to use is
index=cmkprod Service_Name=PING | fields Host_Name, Service_Name, Status | join type=left Host_Name
[ inputlookup compass_ci.csv | fields Host_Name, Region, Ecosystem]
| table Host_Name, Service_Name, Status, Region, Ecosystem
How can I join the lookuptable and a index?
... View more