topic Re: Edit csv file on splunk web in Splunk Search

Edit csv file on splunk web

appleman — Fri, 28 Feb 2014 03:49:17 GMT

lookupで指定されたcsvファイルを編集したい場合、splunk web上(GUI)で編集することは可能でしょうか。
若しくはコマンド上で編集するか、新しく編集したcsvをinputlookupで入れなおすしかないのでしょうか。

Hello,

If I want to edit a lookup csv file, is there any way to do it on GUI (Splunk web)?
Or do I need to go with CLI or edit it manually and do inputlookup again?

Thank you.

Re: Edit csv file on splunk web

melonman — Fri, 28 Feb 2014 04:14:47 GMT

No you can not directly edit the CSV files in lookup directory.
As you mentioned, you need to edit it directly or upload again, or do inputlookup/outputlookup.
You should file this as enhancement request

Re: Edit csv file on splunk web

linu1988 — Fri, 28 Feb 2014 05:13:20 GMT

Hello,
Could you take a look at the sideview utils lookup updater? You can update the lookup files from splunk web itself.

Thanks

Re: Edit csv file on splunk web

somesoni2 — Fri, 28 Feb 2014 05:21:03 GMT

Use the sideview version 2.7.1 or higher. They have fixed some issues with it and new version is quite stable.