Splunk Dev

Splunk CSV Lookup

ChristophRichte
Loves-to-Learn

Hello Guys,

I've run into a problem. I created a dashboard where you can edit and delete lookup entries by user input. The problem is that when the user deletes the last entry of the lookup, the header of the CSV disappears and when a Saved Search is run, it cannot find the defined fields.

Does anyone have a solution to keep the header fields even if the last line is deleted, apart from creating a KV store?

With friendly greetings
Christoph

Labels (2)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...