topic need to build an automation to import CSV from below mentioned github location into Splunk lookup file in Splunk Search

need to build an automation to import CSV from below mentioned github location into Splunk lookup file

Zoe_ — Wed, 23 Apr 2025 07:17:10 GMT

anybody have experience for building an automation to import CSV from github location into Splunk lookup file, CSV files are constantly changing, and I need to automate daily updates

Re: need to build an automation to import CSV from below mentioned github location into Splunk lookup file

livehybrid — Wed, 23 Apr 2025 08:27:22 GMT

Hi @Zoe_

You may find the Webtools Add-on helpful here, you can use the custom curl command in the app to request your data and then parse it into a table, then use outputlookup to save it.

Here is an example I have used previously:

The SPL for this is:

🌟 Did this answer help you? If so, please consider:

Adding karma to show it was useful
Marking it as the solution if it resolved your issue
Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

Re: need to build an automation to import CSV from below mentioned github location into Splunk lookup file

VatsalJagani — Wed, 23 Apr 2025 17:57:10 GMT

@livehybrid- This curl tool sounds useful.

And @Zoe_ you just need to add | outputlookup <your-lookup-name> at the end of @livehybrid 's query.