Hello.
i have a search with different files. In my table I have a field EDZ_000. In another csv file, I have a list with this field EDZ_000 to EDZ_XXX. Need to match this fields to get another column. How do I do that?
Unfortunately, i can't show the source code.
Hi @KalebeRS
Here's a link to the lookup command documentation, which based on the limited information provided should be what you need.
https://docs.splunk.com/Documentation/Splunk/9.0.5/SearchReference/Lookup
I'm assuming your table and the csv file have a matching field column to link the data.