We are using the latest version of lookup file editor (3.4.6) and Splunk cloud version (8.1.2012.1).
I couldn't edit/save any of the lookup files in the lookup editor. I tried uploading the .csv, but now luck.
I get an error saying " you do not have permission", although there are no issues with the permission as I have admin rights. when I tried to change the permission (for testing), I didn't let me save it. I'm getting the below error.
Please suggest a remedy for this.
Hey @rajuloyola
did you figure this out?
I am having the same issue.
I can't edit any lookup table or create any.
Receive the error: You do not have permission to edit this lookup file
Added the following capability to the "admin" role
upload_lookup_files
now I can edit the lookup tables.