Splunk Search

How can I share a lookup script with other apps?

jameshgibson
Path Finder

I have a lookup script that is placed in my apps bin folder. How can I use this external lookup from other apps?

Whenever I try despite setting the lookups sharing to global I get the message lookup script not found. When running the lookup in the app with the script it works fine though.

1 Solution

dwaddle
SplunkTrust
SplunkTrust

I ran into the same problem. Add to your default.meta file

[transforms]
export = system

[searchscripts]
access = read : [ * ], write : [ admin ]
export = system

The searchscripts part is probably the most crucial for your problem-at-hand.

View solution in original post

earlhelms
Path Finder

Thank you

 

0 Karma

dwaddle
SplunkTrust
SplunkTrust

I ran into the same problem. Add to your default.meta file

[transforms]
export = system

[searchscripts]
access = read : [ * ], write : [ admin ]
export = system

The searchscripts part is probably the most crucial for your problem-at-hand.

jameshgibson
Path Finder

thanks works perfectly

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...