Creating lookup tables
Lookup tables are used to enable the fast and easy lookup of static data. You can use lookup tables to enrich events by correlating attributes in the events with corresponding attributes in the lookup table.
About this task
Import the contents of a lookup table in CSV format. A basic example is a CSV file containing application names and a summary update. This data might be used to add summary information to events. In the enrichment example that follows this topic, the following CSV file is imported to create the lookup table.
applicationname,summaryupdate HR,-HR Application Affected Human Resources,-HR Application Affected Payroll Application,-Payroll Application Affected
- Click Lookup tables.
- Click Lookup tables -> New lookup table +.
- Enter a name and a description for the lookup table in Details.
- Click Import from CSV and browse to your CSV file to upload the contents to Monitoring.
For more information, see Example: Enriching event information using lookup tables.