How to package Splunk app with lookup tables, which contains company specific data.

[sabithanitg]

How to package Splunk app with lookup tables, which contains company specific data.

[woodcock]

I assume the problem is that the information is sensitive. In that case, you could use GetWatchList to import the lookup after the app is installed and have the URL available only to authorized users:

https://splunkbase.splunk.com/app/635/

[aweitzman · Accepted solution]

Put your .csv lookup tables in the /lookups folder of the app.

Check here for all the details: http://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Addfieldsfromexternaldatasources