Knowledge Management

How can i know the owner of Lookup that are created in Lists and Lookups?

amitpanjawani
Explorer

How can i know the owner of Lookup that are created in Lists and Lookups?

Tags (1)
0 Karma

somesoni2
Revered Legend

You can use Splunk's REST API Endpoints to get list of all lookup table files with detail information. See this link for more information
http://docs.splunk.com/Documentation/Splunk/6.2.6/RESTREF/RESTknowledge#data.2Flookup-table-files

From Search (listing lookups for all user/apps)

| rest /servicesNS/-/-/data/lookup-table-files | table title eai:data eai:userName eai:appName | rename title as name eai:data as Path eai:userName as Owner eai:appName as AppContext

From Curl

curl -k -u admin:pass https://localhost:8089/servicesNS/-/-/data/lookup-table-files

sagrl
Explorer

You can visit Settings>Knowledge>Lookups and see the list of Lookups available and Owner info.

$SPLUNK_HOME$/manager/$APP_NAME$/data/lookup-table-files
Get Updates on the Splunk Community!

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...

What's New in Splunk Observability - October 2025

What’s New?    We’re excited to announce the latest enhancements to Splunk Observability Cloud and share ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...