All Apps and Add-ons

Loading lookup file...

lukeh
Contributor

Hi 🙂

I am really impressed by this app but some larger lookup files don't load at all whereas some smaller lookup files do load ok. It gets stuck on "Loading lookup file..."

FYI: We are running Lookup File Editor 1.0 on Splunk 6.0.2

Any help would be greatly appreciated 🙂

Luke.

P.S. The lookup files do load ok in Sideview Utils Lookup Updater but your interface is cooler 😄

Tags (1)
0 Karma
1 Solution

bfernandez
Communicator

I solved this problem deleting the ownership assigned to the lookup file set in:

$SPLUNK_HOME/etc/apps/myapp/metadata/local.meta

[lookups/xxxt.csv]
version = 5.0.3
export = system
owner = name <-- delete

I hope this help

View solution in original post

bfernandez
Communicator

I solved this problem deleting the ownership assigned to the lookup file set in:

$SPLUNK_HOME/etc/apps/myapp/metadata/local.meta

[lookups/xxxt.csv]
version = 5.0.3
export = system
owner = name <-- delete

I hope this help

JensT
Communicator

Works indeed. But its a heavy limitation 😞

0 Karma

lukeh
Contributor

Thanks man!

lukeh
Contributor

no worries:
1/ Firefox 29.0.1 and Google Chrome 35.0.1916.114 m
2/ no
3/ one is 63 KB with 24 columns, and another is 1.73 MB with 2 columns

0 Karma

LukeMurphey
Champion

I'l take a look into improving this. I tested it with various browsers and lookup files and found that it reliably handled files up to 10 MB. I actually have a limit built-in so that it will show a warning if the file is too big.

Could you answer the following to help me narrow the problem down?

1) What browser are you using?
2) Are there any errors posted in the console? (in case the issue isn't related to the size of the lookup but due to some other problem)
3) How big is the lookup file?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Laser Bananas and Edge Hubs: Exploring Operational Technology (OT) Data Through a ...

  OT is a different environment to traditional IT and can have interesting challenges when interfacing the ...

Event Series: Mastering AI Tokenomics and Splunk Agent Observability

Beyond the Black Box: Correlating AI Performance and Tokenomics with Splunk Agent Observability   As ...

span_metrics: The OpenTelemetry-Idiomatic Way to See Inside Your Services

You open a trace in Splunk Observability Cloud and everything looks fine. One root span, order-pipeline, with ...