- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
how do I check if a lookup table get updated with any output lookup command
karu0711
Communicator
10-31-2023
08:39 AM
I have lookup table in splunk.
I want check if ever been update in Splunk using output lookup command
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
_JP
Contributor
10-31-2023
12:24 PM
This solved question seems to be what you're looking for:
Solved: How to get the Audit for Lookup files modification... - Splunk Community
If you don't want any changes at all, and you're on a *nix system, can you deploy your lookup with read-only permissions on the file within the app?
