I am trying to use a list from a CSV file to query results for that list, but I only get a result from the first row.
The data looks like such;
workstation_1
workstation_2
workstation_3
The query looks like such;
index="wineventlog" Source_Workstation=* [inputlookup test.csv | fields "Workstation Name" | rename "Workstation Name" as search] | table Source_Workstation, _time, Logon_Account | dedup Source_Workstation
... View more