Lookup Manager
info
Lookup (lookup) - lookup is a static data table used to enrich or transform data during a search.
The Lookup Manager module is responsible for creating, viewing, editing, and deleting lookups, as well as managing the values contained within them. It provides centralized management of reference data used in the system.
Configuration Structure
| Name | Field in the index | Syntax | Description | Data example |
|---|---|---|---|---|
| Lookup name | name | <string> | Lookup name | lookup_name |
| Index name | idx | <string> | Index name corresponding to the lookup | index_name |
| Fields | fields | <array> | List of lookup fields used for enrichment | field1, field2 |
| Number of rows to display | size | <int> | Number of rows to display lookup data | 1000 |
| Case sensitivity | case_sensitive | <array> | List of fields that are case-sensitive when matching | field1, field2 |
| Wildcard | wildcards | <array> | List of fields to match by rule Wildcard | field1, field2 |
| Cidrmatch | cidrmatch | <array> | List of fields to match by rule | field1, field2 |
| Condition | condition | <string> | Filter condition applied before matching lookup records | status != "Dismissed" |
| Limit | limit | <int> | Limitation on the size of lookup data before matching | 1000 |
| Maximum number of matches | max_match | <int> | Maximum number of matches from the lookup for a single search result when executing a command lookup | 100 |