Hi,
I want to restore a KVLookup from a backup system , and not from the Splunk backup.
Is there a way to restore a KVLookup file in case I don't have the backup set up in Splunk? Or do I have to configure the Splunk backup to restore?
If so, where is the KVLookup file that contains the data itself located (beside $SPLUNK_HOME/var/lib/splunk/kvstore that contains collection.conf and transforms.conf)?
Appreciate your assistance,
Thanks!
