All Apps and Add-ons

How to add lookup tables into Lookup File Editor with API?

fumeister
New Member

We are using Search Head Clustering. How can I add or delete new lookup tables through Lookup File Editor app?

Tags (1)
0 Karma

LukeMurphey
Champion

I see two options here. I tend to recommend the second option though since this is well documented. This does restrict you to using KV store collection though; CSV files are difficult to interact with via a REST API (I had to write my own in the Lookup Editor to make CSVs editable).

Here are the details:

Using the REST APIs in the Lookup Editor
The REST APIs for the Lookup Editor aren't well documented since I hadn't designed them for use outside of the app itself.

They can be used outside of the app if you want though. The REST handler is here: https://github.com/LukeMurphey/lookup-editor/blob/master/src/bin/lookup_editor_rest_handler.py. You can see an example of how the handler is used by looking at the Javascript here: https://github.com/LukeMurphey/lookup-editor/blob/master/src/appserver/static/js/views/LookupEditVie....

Use the Splunk KV store collection APIs
Alternatively, you can just use the KV store APIs included in Splunk. You can see them here: http://dev.splunk.com/view/webframework-developapps/SP-CAAAEZG

Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...