Hello.
sorry for bitmaps but crazy interface doesnt allow me to put xml code
need to upload new
C:\Splunk\etc\apps\alert_schedule\lookups\schedule_maintenance_windows.csv
fileusing curl
curl -k -u admin:pass https://localhost:8089/servicesNS/admin/search/data/lookup-table-files -d eai:data='C:/Splunk/var/run/splunk/lookup_tmp/maintenance_windows_empty.csv' -d name=maintenance_windows_empty.csv
and getting error
<msg type="ERROR">File is binary or file encoding is not supported, only utf-8 encoded files are supported</msg>
just for a case: maintenance_windows_empty.csv file is empty, it is neither ASCII nor UTF-8 (and not a binary of cause!!!)
please advice! 🙂
I had a similar problem. In my case it turned out to be the fact that we changed the user that the splunk process was running under, so it could no longer access the lookup file in the lookup_tmp directory. The error message was totally misleading, but after changing the ownership of the lookup file to match the Splunk username, it worked again.
So in your case, make sure that the splunk process has access to "C:/Splunk/var/run/splunk/lookup_tmp/maintenance_windows_empty.csv"