https://community.splunk.com/t5/Splunk-Search/How-to-access-a-lookup-table-belonging-to-another-app/m-p/431646#M123375 <P>I've read the documentation that if permissions are set to Global for a lookup that it can be accessed from within another app.</P> <P>I want to be able to access the following lookup from the location below while I'm in Search and Reporting app.</P> <P>/apps/splunk/etc/apps/SA-ThreatIntelligence/lookups/asn_by_cidr.csv </P> <P>In Search I tried:</P> <PRE><CODE>| inputlookup /apps/splunk/etc/apps/SA-ThreatIntelligence/lookups/asn_by_cidr.csv </CODE></PRE> <P>But I get nothing back.</P> Tue, 29 Sep 2020 19:47:02 GMT brdr 2020-09-29T19:47:02Z https://community.splunk.com/t5/Splunk-Search/How-to-access-a-lookup-table-belonging-to-another-app/m-p/431646#M123375 <P>I've read the documentation that if permissions are set to Global for a lookup that it can be accessed from within another app.</P> <P>I want to be able to access the following lookup from the location below while I'm in Search and Reporting app.</P> <P>/apps/splunk/etc/apps/SA-ThreatIntelligence/lookups/asn_by_cidr.csv </P> <P>In Search I tried:</P> <PRE><CODE>| inputlookup /apps/splunk/etc/apps/SA-ThreatIntelligence/lookups/asn_by_cidr.csv </CODE></PRE> <P>But I get nothing back.</P> Tue, 29 Sep 2020 19:47:02 GMT https://community.splunk.com/t5/Splunk-Search/How-to-access-a-lookup-table-belonging-to-another-app/m-p/431646#M123375 brdr 2020-09-29T19:47:02Z https://community.splunk.com/t5/Splunk-Search/How-to-access-a-lookup-table-belonging-to-another-app/m-p/431647#M123376 <P>Try this:</P> <P>| inputlookup asn_by_cidr.csv </P> Tue, 29 Sep 2020 19:43:47 GMT https://community.splunk.com/t5/Splunk-Search/How-to-access-a-lookup-table-belonging-to-another-app/m-p/431647#M123376 jkat54 2020-09-29T19:43:47Z https://community.splunk.com/t5/Splunk-Search/How-to-access-a-lookup-table-belonging-to-another-app/m-p/431648#M123377 <P>I also tried that syntax as well to no avail.</P> Wed, 30 May 2018 16:29:49 GMT https://community.splunk.com/t5/Splunk-Search/How-to-access-a-lookup-table-belonging-to-another-app/m-p/431648#M123377 brdr 2018-05-30T16:29:49Z https://community.splunk.com/t5/Splunk-Search/How-to-access-a-lookup-table-belonging-to-another-app/m-p/431649#M123378 <P>If you open the enterprise security app and go to search drop down select search in drop down, try the same search and let me know.</P> Wed, 30 May 2018 16:44:57 GMT https://community.splunk.com/t5/Splunk-Search/How-to-access-a-lookup-table-belonging-to-another-app/m-p/431649#M123378 jkat54 2018-05-30T16:44:57Z https://community.splunk.com/t5/Splunk-Search/How-to-access-a-lookup-table-belonging-to-another-app/m-p/431650#M123379 <P>Hi jkat54, I don't access to log into the search head to view the lookup on file. I actually now think the lookup file is empty, and hence producing no events. I can successfully access another lookup within SA-ThreatIntelligence.... We can close this one. thank you.</P> Wed, 30 May 2018 20:31:12 GMT https://community.splunk.com/t5/Splunk-Search/How-to-access-a-lookup-table-belonging-to-another-app/m-p/431650#M123379 brdr 2018-05-30T20:31:12Z https://community.splunk.com/t5/Splunk-Search/How-to-access-a-lookup-table-belonging-to-another-app/m-p/431651#M123380 <P>I found it to be empty in my testing too</P> Wed, 30 May 2018 20:50:14 GMT https://community.splunk.com/t5/Splunk-Search/How-to-access-a-lookup-table-belonging-to-another-app/m-p/431651#M123380 jkat54 2018-05-30T20:50:14Z