Do Datasets in ES ever need updating? How do I update the ones that need it please? Thank u in advance.

[SamHTexas]

I notice some include .csv files. Do these .csv s need updating? Or do they stay stale? How are Data sets updated? Please advise. Thank u very much.

[richgalloway]

ES has scheduled searches that update several of its lookup files.  Which ones are you asking about?

[SamHTexas]

Thanks for your message. I have many , some have .csv files. Am just curious if I have to manually update any so they won't get old, specially the contents of the .csv files? I appreciate your response sir.

[richgalloway]

Again, it depends on the file.  Scan the list of saved searches for "Lookup Gen" to see those that update automatically.  You also can search them for "outputlookup".

Once you know which are updated automatically you know which are not.  Of those that are not, some will be static or nearly so.  The rest may require occasional updates, depending on how they are used (if at all).