SPLK-1001 · Question #167
How can results from a specified static lookup file be displayed?
The correct answer is B. inputlookup command. inputlookup is the correct Splunk command for reading and displaying results directly from a static lookup file (CSV or KV store) without requiring a search pipeline - it treats the lookup file itself as the data source. The plain lookup command (A) enriches search results by…
Question
How can results from a specified static lookup file be displayed?
Options
- Alookup command
- Binputlookup command
- CSettings > Lookups > Input
- DSettings > Lookups > Upload
How the community answered
(63 responses)- A8% (5)
- B84% (53)
- C3% (2)
- D5% (3)
Explanation
inputlookup is the correct Splunk command for reading and displaying results directly from a static lookup file (CSV or KV store) without requiring a search pipeline - it treats the lookup file itself as the data source. The plain lookup command (A) enriches search results by joining them with lookup data, but it doesn't display the lookup file contents on its own. The Settings menu options (C and D) are for managing lookup definitions and uploading lookup files respectively - they're administrative UI paths, not search commands.
Memory tip: Think "input" = bring data in from a file to view it; lookup alone = look up additional fields to enrich existing results.
Community Discussion
No community discussion yet for this question.