All Apps and Add-ons

Why am I unable to edit or create lookups that are local to an app using Lookup File Editor?

dominiquevocat
Motivator

I seem to be unable to edit/create non-globally shared lookups. I can call/link the editor view in other apps but i cannot edit or create lookups that are app specific using http://apps.splunk.com/app/1724/ (Lookup File Editor).

0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi dominiquevocat,

it happend to me, that I had to set the owner of a lookup file to nobody/no owner to be able to modify it using the editor.

View solution in original post

0 Karma

MuS
SplunkTrust
SplunkTrust

Hi dominiquevocat,

it happend to me, that I had to set the owner of a lookup file to nobody/no owner to be able to modify it using the editor.

0 Karma

theouhuios
Motivator

Have you checked the permissions for those lookup files and those Apps? You may have only read access to them.

Get Updates on the Splunk Community!

Streamline Data Ingestion With Deployment Server Essentials

REGISTER NOW!Every day the list of sources Admins are responsible for gets bigger and bigger, often making the ...

Remediate Threats Faster and Simplify Investigations With Splunk Enterprise Security ...

REGISTER NOW!Join us for a Tech Talk around our latest release of Splunk Enterprise Security 7.2! We’ll walk ...

Introduction to Splunk AI

WATCH NOWHow are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. ...