Action Type: Upload File

Security Requirements and Controls

The Upload File action creates a CSV lookup file from the events and uploads the file to LogScale in the repository/view of the action. The CSV lookup file can then be used in the match() function, among others.

It is recommended to use this action with a search that only returns the fields that are needed as columns in the CSV file. This can, for instance, be achieved by using the select() query function.

For more information about lookup files in LogScale, see Lookup Files.

Configuring Upload File Action

Figure 162. Configuring Upload File Action


Parameter Description
Action Name The name provided for the action.
File Name When creating a new lookup file, the file name for the CSV file. Type the name of the new lookup file to create. The file name must include the .csv extension.

Go to Resources and select Files to find the lookup file.

Whenever the action triggers, the file is overwritten. This means that the action must receive all events necessary to populate the file, and not just the changes since the action was last triggered.