Splunk Search

How can I share a lookup script with other apps?

jameshgibson
Path Finder

I have a lookup script that is placed in my apps bin folder. How can I use this external lookup from other apps?

Whenever I try despite setting the lookups sharing to global I get the message lookup script not found. When running the lookup in the app with the script it works fine though.

1 Solution

dwaddle
SplunkTrust
SplunkTrust

I ran into the same problem. Add to your default.meta file

[transforms]
export = system

[searchscripts]
access = read : [ * ], write : [ admin ]
export = system

The searchscripts part is probably the most crucial for your problem-at-hand.

View solution in original post

earlhelms
Path Finder

Thank you

 

0 Karma

dwaddle
SplunkTrust
SplunkTrust

I ran into the same problem. Add to your default.meta file

[transforms]
export = system

[searchscripts]
access = read : [ * ], write : [ admin ]
export = system

The searchscripts part is probably the most crucial for your problem-at-hand.

jameshgibson
Path Finder

thanks works perfectly

0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...