Lookups for the Splunk Add-on for Squid Proxy
The Splunk Add-on for Squid Proxy has two lookups. The lookup files map fields from Squid Proxy to CIM-compliant values in the Splunk platform. The lookup files are located in
$SPLUNK_HOME/etc/apps/Splunk_TA_squid/lookups
.
Filename | Description |
---|---|
squid_actions_210.csv
|
Maps vendor_action to action which is used in the Web data model.
|
squid_httpstatus.csv
|
Maps status to status_description .
|
Troubleshoot the Splunk Add-on for Squid Proxy | Source types for the Splunk Add-on for Squid Proxy |
This documentation applies to the following versions of Splunk® Supported Add-ons: released
Feedback submitted, thanks!