"Cannot lookup on event_code. The field event_code doesn't exist in the lookup file."

Comments

3 comments

  • Official comment
    Avatar
    Raghu Murthy

    Nice work, Mark :+1:

  • Avatar
    Mark Drummond

    The lookup line is actually:

    | lookup event_description from
    https://github.com/dmark/auth0-cli-utilities/blob/master/auth0_log_event_table.csv
    on auth0_log_event_code=event_code

    I had the "on" part backwards, but still get the same error.

  • Avatar
    Mark Drummond

    Fixed: I was not using the "raw" Github link:

    _sourceCategory=auth0/prod
    | json field=_raw "type" as auth0_log_event_code
    | lookup event_description from https://raw.githubusercontent.com/dmark/auth0-cli-utilities/master/auth0_log_event_table.csv on auth0_log_event_code=event_code

Please sign in to leave a comment.