topic Re: Importing lookup table to Splunk lookup table file editor in Getting Data In

Importing lookup table to Splunk lookup table file editor

waJesu — Mon, 23 Oct 2023 16:18:45 GMT

Is it possible to import an already created lookup table into the Splunk lookup file editor without having to create a new one in the editor? If it is possible, how do I do it?

Re: Importing lookup table to Splunk lookup table file editor

gcusello — Mon, 23 Oct 2023 16:26:52 GMT

Hi @waJesu,

you have two choices:

create a new lookup clicking on "Create a new Lookup" from the Lookup Editor app and importing and saving the csv file,
import the lookup from the Settings menu: [Settings > Lookups > Lookup Table Files > New Lookup Table Files].

In both cases, remember to create the Lookup Definition, because it isn't automatic.

Ciao.

Giuseppe

Re: Importing lookup table to Splunk lookup table file editor

waJesu — Tue, 24 Oct 2023 15:36:50 GMT

Hi Giuseppe

I already have a lookup table created. My question is if it is possible to import that into the Splunk Lookup file editor and not create a new one from there.

Re: Importing lookup table to Splunk lookup table file editor

gcusello — Wed, 25 Oct 2023 06:18:35 GMT

Hi @waJesu ,

yes, in the right top of the Splunk Editor dashboad there's the Import button.

Ciao.

Giuseppe

Re: Importing lookup table to Splunk lookup table file editor

waJesu — Fri, 27 Oct 2023 13:35:26 GMT

I am not sure why I don't have the import button on my instance.

Re: Importing lookup table to Splunk lookup table file editor

gcusello — Fri, 27 Oct 2023 13:45:01 GMT

Hi @waJesu,

which version have you?

I have 3.6.0, it isn't the last one, and I have

Ciao.

Giuseppe