Splunk Enterprise

Does Splunk Enterprise overwrite lookups during app upgrade?

Splunk Employee
Splunk Employee

Trying to understand how lookups are handled during app upgrade. 

If I upgrade an app, will an existing lookup be overwritten by a modified version of the lookup? This pertains to a single instance only, not SHC.

Labels (1)
0 Karma


Hi @sroback_splunk,

Since lookup files has no separate local folder, they will be overwritten on app upgrade.

If this reply helps you an upvote is appreciated.