Lookups for the Splunk Add-on for Citrix NetScaler

The Splunk Add-on for Citrix NetScaler has two lookups. The lookup files map fields from Citrix NetScaler systems to CIM-compliant values in the Splunk platform. The lookup files are located in $SPLUNK_HOME/etc/apps/Splunk_TA_citrix-netscaler/lookups.

Filename	Description
citrix_netscaler_availability_status.csv	Maps state to avl_status_string, avl_status
citrix_netscaler_ha_states.csv	Maps hacurstate to failover_status_string, failover_status
citrix_netscaler_icmp_code.csv	Maps icmp_type to icmp_code
citrix_netscaler_appfw_category_severity_v8.2.0.csv	Maps signature to category, severity