Creating lookup tables

Lookup tables are used to enable the fast and easy lookup of static data. You can use lookup tables to enrich events by correlating attributes in the events with corresponding attributes in the lookup table.

About this task

Import the contents of a lookup table in CSV format. A basic example is a CSV file containing application names and a summary update. This data might be used to add summary information to events. In the enrichment example that follows this topic, the following CSV file is imported to create the lookup table.

applicationname,summaryupdate
HR,-HR Application Affected
Human Resources,-HR Application Affected
Payroll Application,-Payroll Application Affected

Procedure

  1. Click Lookup tables.
  2. Click Lookup tables -> New lookup table +.
  3. Enter a name and a description for the lookup table in Details.
  4. Click Import from CSV and browse to your CSV file to upload the contents to Monitoring.

  5. Click Save.

    For more information, see Example: Enriching event information using lookup tables.