Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Look up table question

$
0
0

Hi,

i have individual IPs and then CIDR blocks that i want to look up and group them using a look up table. I am assuming i cannot have both in the same .csv file as i have to add match_type = CIDR(clientip). Then it won't match the individual ips ( 63.158.163.8,64.274.165.6 in the list below). So i created 2 look up tables one for CIDR and one for individual IPs. Both of them i have output field as "Name". Question is would that work? is it possible to have same output field name in both the lookup tables? ideally i would like to have same Output name.

Name clientip Company XXX 63.122.163.0/27 Company YYYY 63.158.163.8 Company YYYY 64.274.165.6


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>