I have a lookup table include two columns, key == source (this is an IP list, what I can found in gl2_remote_IP), value == host (this is a host name what I would like to see in “source” field). I use this as decorator on gl2_remote_IP now (attached the picture).
So I would like to create a pipeline, for this process, because if I use this list as decorator, I can not search in the value.
I created this, but is not working…I’m very beginner in pipelines, so pls help me in this problem,
let source = lookup_value(“src_hst”, $message.source); #the lookup table name is src_hst.csv