Lookups for the Splunk Add-on for F5 BIG-IP¶
The Splunk Add-on for F5 BIG-IP has six lookups. The lookup files are located in $SPLUNK_HOME/etc/apps/Splunk_TA_f5-bigip/lookups.
| File name | Description |
|---|---|
| f5_bigip_apm_syslog_action.csv | Contains datamodel_action against APM syslog action. |
| f5_bigip_apm_syslog_protocol.csv | Provides protocol against transport for APM syslog. |
| f5_bigip_icontrol_ha_states.csv | Maps get_failover_state to a boolean value failover_status to support the ITSI load balancer module. |
| f5_bigip_icontrol_availability_status.csv | Maps avl_status_string to a boolean value avl_status to support the ITSI load balancer module. |
| f5_bigip_category_value_action_lookup.csv | Provides action based on telemetryEventCategory and http_status for telemetry events. |
| f5_bigip_ltm_http_irule_action.csv | Contains action for http_status for f5:bigip:ltm:http:irule. |