All Apps and Add-ons

Lookup file Editor App for Splunk Enterprise: How to edit a file with more than 120 rows?

changux
Builder

Hi all.

I have a file with 200 rows and 10 columns. When I tried to make some changes, I saw that the last line is row 122 (my file has 20k). How I can adjust to show the whole file?

Thanks!

0 Karma
1 Solution

LukeMurphey
Champion

When you scroll down, more rows should appear. I just tested again on both KV and CSV lookups (the later with 100,000 rows) and it worked.

Here is an example of using the middle mouse key to scroll. Note that you need to click into the table first:

alt text

Here is an example of using the scroll-bar on the right of the table:

alt text

View solution in original post

0 Karma

nikkkc
Path Finder

same problem here, my csv file have 500 rows and the lookup editor shows only 100 to 120 rows, it depends on every refresh

0 Karma

LukeMurphey
Champion

Can you scroll down to see more rows? More rows should appear once you begin to scroll.

0 Karma

nikkkc
Path Finder

Oh, it only works with internet explorer! it does not with firefox

0 Karma

e2eadmin
Explorer

Yep...same. Works great in IE. Not in Chrome.

0 Karma

LukeMurphey
Champion

@nikkc: are you hovering your mouse cursor over the table while you scroll? I just tried it on Firefox and it worked for me (though only when I had the cursor over the table).

0 Karma

LukeMurphey
Champion

When you scroll down, more rows should appear. I just tested again on both KV and CSV lookups (the later with 100,000 rows) and it worked.

Here is an example of using the middle mouse key to scroll. Note that you need to click into the table first:

alt text

Here is an example of using the scroll-bar on the right of the table:

alt text

0 Karma

qbolbk59
Path Finder

Hi @LukeMurphey ,

How can i search and edit a specific value in the lookup file. The thing is in my lookup file, there are more than 1000 rows and i wish to change value on one of the column of a particular row. But it's too difficult to find that row in the lookup.
I tried normal search (CTRL+F) in the browser but apparently it only searches values in the current view of the lookup (number of rows currently visible on screen) but if the values are somehwere below or at the top of current view, it doesn't searches.

I can search for values using inputlookup, but that's just for searching events.

How can i search and edit values in the lookup file using lookup editor app ?

0 Karma

LukeMurphey
Champion

I am going to convert this to a question since this is related but I think deserves its own discussion.

0 Karma

LukeMurphey
Champion

Here is the new question: https://answers.splunk.com/answers/703714/how-can-i-search-and-edit-a-specific-value-in-the.html?chi...

TL;DR: I'm looking into adding a feature that can do this.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...