We have updated our Terms of Service, Code of Conduct, and Addendum.

Can a filter use a lookup table?

Options
Shane Daniels
Shane Daniels Posts: 28 mod

Can a filter use a lookup table?

Best Answer

Answers

  • Shane Daniels
    Shane Daniels Posts: 28 mod
    edited July 2023 Answer ✓
    Options

    Yes.

    Cribl Expressions | Cribl Docs

    Native Cribl Stream function methods, found under C.*

    Example: C.Lookup(‘filename.csv, ‘host).match(host)

  • Jon Rust
    Jon Rust Posts: 440 mod
    Options

    Example, this will return true if the file has "value_to_lookup" in the column "key_column":

    C.Lookup('lookupfile.csv','key_column').match('value_to_lookup')