https://community.splunk.com/t5/Splunk-Search/How-to-automatically-update-a-CSV-lookup-based-on-a-daily-CSV/m-p/276618#M83438 <P>Hello,</P> <P>I have a CURL script that generates a CSV file, and I would like to use that CSV file as a lookup for some searches that we run in Splunk. </P> <P>The CURL script runs once daily and generates the output file. </P> <P>My question is, how do I get the lookup table to update automatically whenever a new file is placed in the specified location?<BR /> If I define a lookup using the Web GUI, would the lookup table be automatically updated whenever the CSV file is updated?</P> <P>Also, If the lookup file is generated on one node of a 4 node search head cluster, will it automatically be propagated to all the cluster nodes, or does it need to be manually defined on each node?</P> <P>Thanks and Regards,<BR /> Madan Sudhindra</P> Mon, 19 Oct 2015 22:05:49 GMT msudhindra 2015-10-19T22:05:49Z https://community.splunk.com/t5/Splunk-Search/How-to-automatically-update-a-CSV-lookup-based-on-a-daily-CSV/m-p/276618#M83438 <P>Hello,</P> <P>I have a CURL script that generates a CSV file, and I would like to use that CSV file as a lookup for some searches that we run in Splunk. </P> <P>The CURL script runs once daily and generates the output file. </P> <P>My question is, how do I get the lookup table to update automatically whenever a new file is placed in the specified location?<BR /> If I define a lookup using the Web GUI, would the lookup table be automatically updated whenever the CSV file is updated?</P> <P>Also, If the lookup file is generated on one node of a 4 node search head cluster, will it automatically be propagated to all the cluster nodes, or does it need to be manually defined on each node?</P> <P>Thanks and Regards,<BR /> Madan Sudhindra</P> Mon, 19 Oct 2015 22:05:49 GMT https://community.splunk.com/t5/Splunk-Search/How-to-automatically-update-a-CSV-lookup-based-on-a-daily-CSV/m-p/276618#M83438 msudhindra 2015-10-19T22:05:49Z https://community.splunk.com/t5/Splunk-Search/How-to-automatically-update-a-CSV-lookup-based-on-a-daily-CSV/m-p/276619#M83439 <P>Hi msudhindra,</P> <P>The lookup will be updated as soon as you put the new csv in place, also the lookup will be propagated across the Search Head Cluster <A href="http://docs.splunk.com/Documentation/Splunk/latest/DistSearch/HowconfigurationworksinSHC#How_configuration_changes_propagate_in_a_search_head_cluster">http://docs.splunk.com/Documentation/Splunk/latest/DistSearch/HowconfigurationworksinSHC#How_configuration_changes_propagate_in_a_search_head_cluster</A></P> <P>cheers, MuS</P> Tue, 20 Oct 2015 00:08:16 GMT https://community.splunk.com/t5/Splunk-Search/How-to-automatically-update-a-CSV-lookup-based-on-a-daily-CSV/m-p/276619#M83439 MuS 2015-10-20T00:08:16Z