I am newbie at splunk and uberAgent.
I'm looking for tip how to create lookup csv file which would work with uberAgent. Every similarly case i found there end up with suggestion to use filter or users choose filters by them self. In our case easiest way is create csv lookup(based at what I found at google) and use it. But how we can create it based at uberAgent data. What I need it's first line of csv and I will fill the rest with data I need.
PS If something unclear I will be happy to explain.