Using Lookups in Splunk

[@taruchitgoyal3735]

Hi Hallie, Thank you for easy to follow tutorial. Can you please share your approach to build a solution for a scenario of fetching list of hosts returned by an index but not listed in the lookup table? Thank you

[@BlueTeamConsultingLLC]

index=xyz | stats values(hosts) or you can do |tstats values(hosts) where index=xyz

[@majidl3505]

hi Hallie. thanks for the explanation 👍 really straightforward, I would love to follow and learn more from you if you can point me to the right direction and where I should start to learn splunk.

[@BlueTeamConsultingLLC]

Thanks! Good resources are splunks website for their free courses and my udemy course, "splunk zero to power user"

[@healthymealthy775]

I really appreciate the work you are doing! I'm going to get your udemy course.

[@xaviercortez5625]

Helpful video, for anyone interested Hallie has a course in Udemy which is really good.