Topic 1 – Using Lookup Commands

• Understand lookups
• Use the inputlookup command to search lookup files
• Use the lookup command to invoke field value lookups
• Use the outputlookup command to create lookups
• Invoke geospatial lookups in search

Topic 2 – Adding a Subsearch

• Define subsearch
• Use subsearch to filter results
• Identify when to use subsearch
• Understand subsearch limitations and alternatives

Topic 3 – Using the return Command

• Use the return command to pass values from a subsearch
• Compare the return and fields commands

Leveraging Lookups and Subsearches Course Prerequisites:

To be successful, students should have a working understanding of
these courses:

• What is Splunk?
• Intro to Splunk
• Intro to Knowledge Objects
• Using Fields