Is there a way to tell what is populating a LOOKUP csv file?

[Gregski11]

I inherited a Splunk environment I was informed the other day that a computers.csv lookup is not generating any results, is there a way to find out what should be populating that file which is currently empty, I did find the App which houses the lookup csv 

[Gregski11]

I ranned this and found some clues

| rest splunk_server=local /servicesNS/-/-/saved/searches
| table title eai:acl.app eai:acl.owner search
| where match(search,"computers.csv")

[richgalloway]

Search your saved searches for the name of the lookup file.

| rest /servicesNS/-/-/saved/searches splunk_server=local
| search search="*computers.csv*" search="*outputlookup*"
| table title

[Gregski11]

thanks Rich I ran those searches in two separate Splunk environments (the lookup is working in one but not in the other) and got this error in both:

No results found. Try expanding the time range.

even after expanding the time range to 30 days I get nothing, plus I don't understand what you are having me do, could you explain please 

[richgalloway]

I left out some key wildcards.  I've updated my answer.

Like I said in the answer, the query searches your saved searches, reports, and alerts (all the same thing, really) for references to the lookup file.  It also searches for the outputlookup command to help narrow the scope to those searches that write to the lookup.