Lookup File editor is nice app for end-users, but is now becoming a management head-ache for Splunk admins. the backup folder of lookup editor is now almost 5GB and SHC replication/bundles is taking forever.
Any nice idea to either
- to ensure only one previous copy is kept
- delete backups every x months from lookup editor backup?
