Skip to main content
Solved

Can a filter use a lookup table?

  • March 11, 2025
  • 2 replies
  • 17 views

Can a filter use a lookup table?

Best answer by Shane Daniels

Yes.

Cribl Expressions | Cribl Docs

Native Cribl Stream function methods, found under C.*

Example: C.Lookup(‘filename.csv, ‘host).match(host)

2 replies

  • Author
  • Employee
  • Answer
  • March 11, 2025

Yes.

Cribl Expressions | Cribl Docs

Native Cribl Stream function methods, found under C.*

Example: C.Lookup(‘filename.csv, ‘host).match(host)


Jon Rust
Forum|alt.badge.img
  • Employee
  • March 11, 2025

Example, this will return true if the file has "value_to_lookup" in the column "key_column":

C.Lookup('lookupfile.csv','key_column').match('value_to_lookup')