In Splunk, a lookup can be referenced in an alert by running a search that incorporates the lookup and saving that search as an alert. This allows the alert to use the lookup data as part of its logic.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit