Splunk Enterprise

Adding entires in a KV Store through the lookup editor


I have been building KV Store lookups with the lookup editor and I have noticed that when I add a line in the UI, when I leave it and come back to it, it duplicates the line multiple times and I have to go back and delete the duplicates.  This seems to happen whether I am copying and pasting or just simply adding a line by hand.  Has anyone else seen this issue or am I doing something wrong? 

To add a line I right-click on the row and select add a new line above.  Once I finish the data input I leave the line to commit it.  I go to my dashboard that is displaying the store, refresh and note that there are multiple copies of the line I just added.

This does not happen with CSV file lookups, just the KV Stores.

Thoughts?  More info?

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...