All Apps and Add-ons

How to get the history of modifications made to a lookup file?

akarivaratharaj
Communicator

I have gone through a few questions which are related to lookup file changes. I tried to use the same query to get the internal logs regarding my lookup file changes but I am unable to fetch any logs.

I would like to know where can I find the information about the changes made to my lookup file. The information is more related to the user who modified and the respective time.

I tried to search in _audit index, but I am unable to find the exact logs (may be the way of my searching is wrong)

Could anyone please help me in finding the history of modification/changes made to any lookup file?

Labels (1)
Tags (1)
0 Karma

akarivaratharaj
Communicator

Could anyone help me on this please?

0 Karma

akarivaratharaj
Communicator

I am looking this information to check the history of the modification made to a lookup file. If anyone can help me on this, it will be much appreciated!

0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...