topic Re: Lookup csv missing in definitions in Splunk Search

Lookup csv missing in definitions

cdstealer — Thu, 17 Mar 2016 11:08:57 GMT

Hi, Hopefully a quick one 🙂 I have a user that can upload lookup table files, but when a lookup definition is created, the file does not appear in the lookup file list. The uploaded file is present and the permissions seem good. The file does not appear even as the admin user, so I know it's not a perms issue.
I've even executed a debug/refresh to no avail.
Has anyone come across this before?

TIA
Steve

Re: Lookup csv missing in definitions

dcarmack_splunk — Thu, 17 Mar 2016 13:01:48 GMT

Can you successfully call the lookup using the inputlookup command?

Re: Lookup csv missing in definitions

cdstealer — Thu, 17 Mar 2016 13:32:05 GMT

Hi D, Yes we are able to view the contents via "| inputlookup"
Cheers

Re: Lookup csv missing in definitions

cdstealer — Thu, 17 Mar 2016 13:52:12 GMT

Sigh.. Without changing anything, I've just rechecked and the table file now appears in the drop down. I have no idea what happened. Did displaying the file force something?

Thanks anyway 🙂

Re: Lookup csv missing in definitions

cdstealer — Thu, 17 Mar 2016 13:53:18 GMT

Looks like after running "| inputlookup " it forced it to be seen?

Re: Lookup csv missing in definitions

eugenek — Mon, 04 Jun 2018 21:37:29 GMT

It didn't for me 😞

Re: Lookup csv missing in definitions

liammcmenamin — Tue, 23 Apr 2019 09:29:18 GMT

That also didn't work for me. What did work was:
- open the app that contains the lookup file
- goto settings --> lookups --> Lookup definitions. The active app will be selected.
- click create new lookup definition
- the file should be visible!

Re: Lookup csv missing in definitions

bipinb555 — Sat, 09 May 2020 12:32:50 GMT

This worked for me

Re: Lookup csv missing in definitions

lmonahan — Fri, 01 Oct 2021 15:38:06 GMT

Worked for me too!