All Apps and Add-ons

Lookup file Editor App for Splunk Enterprise: How to edit a file with more than 120 rows?

changux
Builder

Hi all.

I have a file with 200 rows and 10 columns. When I tried to make some changes, I saw that the last line is row 122 (my file has 20k). How I can adjust to show the whole file?

Thanks!

0 Karma
1 Solution

LukeMurphey
Champion

When you scroll down, more rows should appear. I just tested again on both KV and CSV lookups (the later with 100,000 rows) and it worked.

Here is an example of using the middle mouse key to scroll. Note that you need to click into the table first:

alt text

Here is an example of using the scroll-bar on the right of the table:

alt text

View solution in original post

0 Karma

nikkkc
Path Finder

same problem here, my csv file have 500 rows and the lookup editor shows only 100 to 120 rows, it depends on every refresh

0 Karma

LukeMurphey
Champion

Can you scroll down to see more rows? More rows should appear once you begin to scroll.

0 Karma

nikkkc
Path Finder

Oh, it only works with internet explorer! it does not with firefox

0 Karma

e2eadmin
Explorer

Yep...same. Works great in IE. Not in Chrome.

0 Karma

LukeMurphey
Champion

@nikkc: are you hovering your mouse cursor over the table while you scroll? I just tried it on Firefox and it worked for me (though only when I had the cursor over the table).

0 Karma

LukeMurphey
Champion

When you scroll down, more rows should appear. I just tested again on both KV and CSV lookups (the later with 100,000 rows) and it worked.

Here is an example of using the middle mouse key to scroll. Note that you need to click into the table first:

alt text

Here is an example of using the scroll-bar on the right of the table:

alt text

0 Karma

qbolbk59
Path Finder

Hi @LukeMurphey ,

How can i search and edit a specific value in the lookup file. The thing is in my lookup file, there are more than 1000 rows and i wish to change value on one of the column of a particular row. But it's too difficult to find that row in the lookup.
I tried normal search (CTRL+F) in the browser but apparently it only searches values in the current view of the lookup (number of rows currently visible on screen) but if the values are somehwere below or at the top of current view, it doesn't searches.

I can search for values using inputlookup, but that's just for searching events.

How can i search and edit values in the lookup file using lookup editor app ?

0 Karma

LukeMurphey
Champion

I am going to convert this to a question since this is related but I think deserves its own discussion.

0 Karma

LukeMurphey
Champion

Here is the new question: https://answers.splunk.com/answers/703714/how-can-i-search-and-edit-a-specific-value-in-the.html?chi...

TL;DR: I'm looking into adding a feature that can do this.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Get More Out of Your Security Practice With a SIEM

Get More Out of Your Security Practice With a SIEMWednesday, July 31, 2024  |  11AM PT / 2PM ETREGISTER ...