All Apps and Add-ons

Why am I unable to edit or create lookups that are local to an app using Lookup File Editor?

dominiquevocat
Motivator

I seem to be unable to edit/create non-globally shared lookups. I can call/link the editor view in other apps but i cannot edit or create lookups that are app specific using http://apps.splunk.com/app/1724/ (Lookup File Editor).

0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi dominiquevocat,

it happend to me, that I had to set the owner of a lookup file to nobody/no owner to be able to modify it using the editor.

View solution in original post

0 Karma

MuS
SplunkTrust
SplunkTrust

Hi dominiquevocat,

it happend to me, that I had to set the owner of a lookup file to nobody/no owner to be able to modify it using the editor.

0 Karma

theouhuios
Motivator

Have you checked the permissions for those lookup files and those Apps? You may have only read access to them.

Get Updates on the Splunk Community!

Take the 2021 Splunk Career Survey for $50 in Amazon Cash

Help us learn about how Splunk has impacted your career by taking the 2021 Splunk Career Survey. Last year’s ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

Observability Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestSplunk APM's New Tag Filter ExperienceSplunk APM has updated ...