Using a Lookup Table in Splunk

In this video I will talk about the usefulness of lookup tables within Splunk. There will be a demonstration on how to use 3 search commands (lookup, inputlookup and outputlookup) that interact with lookup tables. I will also show off the Splunk App for Lookup File Editing in my environment and highly recommend installing this Splunk app from splunkbase.splunk.com website. I have used many lookup tables to help me maintain a validated user list, translate IP addresses and more throughout my career. Splunk documentation links: About Lookups: https://docs.splunk.com/Documentation... Define a CSV lookup in Splunk Web: https://docs.splunk.com/Documentation... Lookup example in Splunk Web: https://docs.splunk.com/Documentation... Lookup search command: https://docs.splunk.com/Documentation... Inputlookup search command: https://docs.splunk.com/Documentation... Outputlookup search command: https://docs.splunk.com/Documentation... Splunk App links: Splunk App for Lookup File Editing: https://splunkbase.splunk.com/app/1724