https://community.splunk.com/t5/Knowledge-Management/Why-am-I-getting-this-error-quot-Error-in-outputlookup-command/m-p/186492#M1684 <P>Why don't you try this? <STRONG>| savedsearch mysavedsearch | outputlookup mykvstore.csv</STRONG>, to Write to <STRONG>mykvstore.csv</STRONG> lookup file (under $SPLUNK_HOME/etc/system/lookups or $SPLUNK_HOME/etc/apps/*/lookups) ?.</P> Mon, 28 Sep 2020 19:13:51 GMT stephanefotso 2020-09-28T19:13:51Z https://community.splunk.com/t5/Knowledge-Management/Why-am-I-getting-this-error-quot-Error-in-outputlookup-command/m-p/186491#M1683 <P>I'm attempting to create my first kvstore collection and I get this error when I try to write to the collection.</P> <PRE><CODE>Error in 'outputlookup' command: The lookup table 'Permission denied for collection 'mycollection'' is invalid. </CODE></PRE> <P>Here's the search </P> <PRE><CODE>| savedsearch mysavedsearch | outputlookup mykvstore </CODE></PRE> <P>Any ideas what might be causing this?</P> Sun, 15 Mar 2015 13:19:48 GMT https://community.splunk.com/t5/Knowledge-Management/Why-am-I-getting-this-error-quot-Error-in-outputlookup-command/m-p/186491#M1683 ksarpol 2015-03-15T13:19:48Z https://community.splunk.com/t5/Knowledge-Management/Why-am-I-getting-this-error-quot-Error-in-outputlookup-command/m-p/186492#M1684 <P>Why don't you try this? <STRONG>| savedsearch mysavedsearch | outputlookup mykvstore.csv</STRONG>, to Write to <STRONG>mykvstore.csv</STRONG> lookup file (under $SPLUNK_HOME/etc/system/lookups or $SPLUNK_HOME/etc/apps/*/lookups) ?.</P> Mon, 28 Sep 2020 19:13:51 GMT https://community.splunk.com/t5/Knowledge-Management/Why-am-I-getting-this-error-quot-Error-in-outputlookup-command/m-p/186492#M1684 stephanefotso 2020-09-28T19:13:51Z https://community.splunk.com/t5/Knowledge-Management/Why-am-I-getting-this-error-quot-Error-in-outputlookup-command/m-p/186493#M1685 <P>I'm currently using outputcsv. I want to switch to kvstore since it supports CRUD operations and scales better whereas, outputcsv and outputlookup do not.</P> Mon, 16 Mar 2015 13:46:41 GMT https://community.splunk.com/t5/Knowledge-Management/Why-am-I-getting-this-error-quot-Error-in-outputlookup-command/m-p/186493#M1685 ksarpol 2015-03-16T13:46:41Z https://community.splunk.com/t5/Knowledge-Management/Why-am-I-getting-this-error-quot-Error-in-outputlookup-command/m-p/186494#M1686 <P>Could you give us more details about how you created these collection and lookup table?<BR /> It seems that something is wrong with the collection, your user does not have access to it and he cannot write into it. </P> Mon, 16 Mar 2015 15:09:26 GMT https://community.splunk.com/t5/Knowledge-Management/Why-am-I-getting-this-error-quot-Error-in-outputlookup-command/m-p/186494#M1686 dgladkikh_splun 2015-03-16T15:09:26Z https://community.splunk.com/t5/Knowledge-Management/Why-am-I-getting-this-error-quot-Error-in-outputlookup-command/m-p/186495#M1687 <P>I moved the collections.conf file from my private user directory to the application directory and it works now.</P> Mon, 16 Mar 2015 15:20:53 GMT https://community.splunk.com/t5/Knowledge-Management/Why-am-I-getting-this-error-quot-Error-in-outputlookup-command/m-p/186495#M1687 ksarpol 2015-03-16T15:20:53Z