topic Re: Change default APP in a rest API call for a inputlookup in Splunk Search

Change default APP in a rest API call for a inputlookup

kilimche — Fri, 17 Dec 2021 15:43:21 GMT

Hi could you please give me an advice how to edit a call to the Splunk Rest API with the following parameter:

search | inputlookup mylookup.csv

The goal is to use another APP, not the user default one.

I tried the following but it gave me same result:

| inputlookup mylookup.csv

| eval app_name = $env:MyNewApp$

Thanks a lot!

richgalloway — Fri, 17 Dec 2021 16:18:20 GMT

kilimche — Mon, 20 Dec 2021 14:05:07 GMT

Thanks,

I am still not able to make this work

richgalloway — Mon, 20 Dec 2021 16:59:54 GMT

It would help if you shared the call you're trying.

kilimche — Wed, 22 Dec 2021 09:05:51 GMT

Hello

I was able to change the relative URL and successfully get the new app data -changing the default application search.

I used this article:

My API call looks like

Thanks