All Apps and Add-ons

Unable to open lookup file from lookup editor app

gndivya
Explorer

I have Admin access, but whenever any of the lookup files is opened through Lookup Editor, it gives me a warning message saying that "The requested lookup file does not exist". But when I open the lookup through a search query, I am able to get the details present in the lookup. Below search query is used.

|inputlookup append=t LookupName.

Lookup has Read permission to everyone and there is no write permission mentioned for any of the users. Also, even if I give write permission to Admin Role, I am still unable to open the lookup through Lookup Editor App.

fiddler
Engager

I had the same issue. You need to clear browser cache.

dm1
Contributor

I cleared the cache still facing the same error. Please advise

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @gndivya,
what's the lookup sharing level of your lookup?
to be visible in Lookup Editor, it must be Global.
You can check this at [Settings -- Lookups -- Lookup table files -- Sharing column].

Ciao.
Giuseppe

0 Karma

dm1
Contributor

I cleared cashe and also tried your suggestion but still facing the same issue. Not sure why. Plz advise.

0 Karma

gndivya
Explorer

@gcusello,

This worked. Thanks.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @gndivya,
if my answer solves your question, please, accept and/or upvote it.
Ciao and next time!
Giuseppe

0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...