Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Lookup Table for all Sourcetype

$
0
0

Hi All,

Quick question, in Manager » Lookups » Automatic lookups » Add New on Apply to drop down box, we can select from SOurcetype, source, or host. If I choose any of the choices, can I put * on the sourcetype field. The reason is the lookup table that I created meant for any sourcetype, and any host those are currently indexed by my SPlunk. I tried before it wouldn't do the trick. If possible, do I need to put other character value?

Please advise on this

Thanks


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>