How to change column header using lookup file editor?

[plaxosi]

How can I change the column name of a CSV using Lookup File Editor (v3.2.1) on a Splunk (v7.2.4) searchhead cluster. If my memory does not deceive me this was possible using Lookup Editor v2.7.1 by simply double clicking on the column header. With the latest version clicking on the header has the effect of reversing the sort order.

Thanks.

[nickhills · Accepted solution]

Right click on the col name, and click edit.

The new version seems a bit tricky - you have to be precise with the click.

[plaxosi]

Hi nickhillscpl
Thanks for the suggestion. You are right, it is tricky. I was only getting the correct edit box about once every twenty attempts, most of the time I ended up editing the first data cell. What seems to work for most of the time me is right click on the column header and then right click (but not left click) on the "edit" option.

[jmeager_splunk]

I third this. Right click on edit is the trick.

[astatrial]

@plaxosi
Right click on the edit works like a charm, it really got my nerves. Thanks