https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-reindex-or-preload-a-large-lookup/m-p/118606#M31682 <P>You could schedule a search that uses the lookup shortly after the scheduled time, causing Splunk to look at the lookup and force a rebuild of the lookup's ad-hoc index.</P> Mon, 13 Jul 2015 21:17:14 GMT martin_mueller 2015-07-13T21:17:14Z https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-reindex-or-preload-a-large-lookup/m-p/118605#M31681 <P>Hi splunkers!</P> <P>I have a large lookup that is fully updated once a day. <BR /> The first time I address this lookup each day, it takes way too long time to get results. <BR /> After such initial reindexing or loading (not sure), further searches are calculated with normal speed.</P> <P>Is it possible to preload/reindex it,not at a search-time, but beforehand, e.g. just after it's done updating on a schedule for all users?</P> <P>Thank you!</P> Mon, 13 Jul 2015 18:35:43 GMT https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-reindex-or-preload-a-large-lookup/m-p/118605#M31681 iKate 2015-07-13T18:35:43Z https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-reindex-or-preload-a-large-lookup/m-p/118606#M31682 <P>You could schedule a search that uses the lookup shortly after the scheduled time, causing Splunk to look at the lookup and force a rebuild of the lookup's ad-hoc index.</P> Mon, 13 Jul 2015 21:17:14 GMT https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-reindex-or-preload-a-large-lookup/m-p/118606#M31682 martin_mueller 2015-07-13T21:17:14Z https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-reindex-or-preload-a-large-lookup/m-p/118607#M31683 <P>It worked! Great, thank you Martin!</P> Tue, 14 Jul 2015 09:55:14 GMT https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-reindex-or-preload-a-large-lookup/m-p/118607#M31683 iKate 2015-07-14T09:55:14Z