https://community.splunk.com/t5/Splunk-Search/Option-to-output-results-to-a-lookup-file/m-p/310647#M93171 <P>I know there is somewhere in Splunk's UI where you can have a scheduled search dump to a lookup file (without adding "outputlookup" to the search itself). However, now I cannot find it. Where is this option?</P> Wed, 30 Aug 2017 20:29:23 GMT LukeMurphey 2017-08-30T20:29:23Z https://community.splunk.com/t5/Splunk-Search/Option-to-output-results-to-a-lookup-file/m-p/310647#M93171 <P>I know there is somewhere in Splunk's UI where you can have a scheduled search dump to a lookup file (without adding "outputlookup" to the search itself). However, now I cannot find it. Where is this option?</P> Wed, 30 Aug 2017 20:29:23 GMT https://community.splunk.com/t5/Splunk-Search/Option-to-output-results-to-a-lookup-file/m-p/310647#M93171 LukeMurphey 2017-08-30T20:29:23Z https://community.splunk.com/t5/Splunk-Search/Option-to-output-results-to-a-lookup-file/m-p/310648#M93172 <P>This is available under the "Edit Schedule" menu option within the edit page of the search. Here is how you find it:</P> <OL> <LI>Open the list of searches on the "Reports" view within the Search app</LI> <LI>Open the "Edit" menu for the search you want to edit</LI> <LI>Select "Edit Schedule"</LI> <LI>Fill out the schedule and click "Next"</LI> <LI>The option to output the results to a lookup will appear</LI> </OL> Wed, 30 Aug 2017 20:35:00 GMT https://community.splunk.com/t5/Splunk-Search/Option-to-output-results-to-a-lookup-file/m-p/310648#M93172 LukeMurphey 2017-08-30T20:35:00Z