-
Notifications
You must be signed in to change notification settings - Fork 8
Expand file tree
/
Copy pathCYA_Search_Loopkups_Splunk_Query
More file actions
23 lines (21 loc) · 1.08 KB
/
CYA_Search_Loopkups_Splunk_Query
File metadata and controls
23 lines (21 loc) · 1.08 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
# Copyright 2019 Paychex, Inc.
# Licensed pursuant to the terms of the Apache License, Version 2.0 (the "License");
# your use of the Work is subject to the terms and conditions of the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor
# provides the Work (and each Contributor provides its Contributions) on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including,
# without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT,
# MERCHANTABILITY, OR FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible
# for determining the appropriateness of using or redistributing the Work and assume
# any risks associated with your exercise of permissions under this License.
| inputlookup MyCYA.csv
| eval allofit=""
| foreach *
[ eval allofit=allofit.",".coalesce('<<FIELD>>',"") ]
| search allofit="*MySearchTerm*"
| fields _time eai:acl.app eai:acl.owner eai:type title *
| fields - allofit