
Overview
This three-hour course is for knowledge managers who want to use lookups to enrich their search environment. Topics will introduce lookup types and cover how to upload and define lookups, create automatic lookups, and use advanced lookup options. Additionally, students will learn how to verify lookup contents in search and review lookup best practices.
Skills Covered
Please refer to course overview.
Prerequisites
To be successful, students should have a solid understanding of the following:
- How Splunk works
- Knowledge Objects
Target Audience
Search Experts Knowledge Managers

Module 1: What is a Lookup?
- Define a lookup ad the default lookup types
- Lookups and the search-time operation sequence
Module 2: Creating Lookups
- Describe lookups at search time
- Use file-based lookups
- Examine a CSV lookup file
- Create (upload, define, configure) a lookup
- Apply advanced lookup options
- Create and use an automatic lookup at search
Module 3: Geospatial Lookups
- Describe the use of geospatial lookups
- Examine KML/KMZ geospatial lookup files
- Add a geospatial lookup file
- Define a geospatial lookup
Module 4: External Lookups
- Define the use of external lookups
- Examine an external_lookup.py lookup script
- Configure external lookups
Dates & Locations
October 28, 2026 - October 28, 2026
November 27, 2026 - November 27, 2026

Exam & Certification
This course is not associated with any Certification.
Training & Certification Guide
Frequently Asked Questions
Speak to a Training Consultant
All courses are HRD Claimable.
Get in touch with our team via the form or WhatsApp us on +6011-5119 6631
























