Dynamic lookup table

[Sangu]

Hi,

I have request to create dashboard with user information, but that user information is provided by AD team, So I need to create a lookup table to access that information. Issue is that the user information may change everyday and AD team will give new excel sheet with updated info, so how can I update the lookup table automatically,

Otherwise I need to upload the csv file everyday to splunk which is not best option.

Please give some ideas, Can we replace that file from splunk server lookup directory? does that work or any other way to do this.

Thanks in Advance!

[venkatasri]

Hi @Sangu 

There is a solution here - Solved: How can I upload & Replace lookup files on a weekl... - Splunk Community

You need to replace the old CSV with new CSV on Splunk SH cluster/standalone. Above link having steps instead of direct replacement of file a safe approach.

---

An upvote would be appreciated if it helps!