Splunk Search

How can I use lookups for a source CSV file that is not under the Splunk code tree?

nbharadwaj
Path Finder

How can I use lookups for a source CSV file that is not under the Splunk code tree?

I am using Splunk 4.0.10. CSV lookups work fine when the file is under the Splunk code base, but it doesn't work when I place the file in a random location (accessible) separate from the code base.

Tags (1)

gkanapathy
Splunk Employee
Splunk Employee

You can't. You could (on filesystems that support it) link the file from a Splunk lookups directory though.

Get Updates on the Splunk Community!

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...

DevSecOps: Why You Should Care and How To Get Started

 WATCH NOW In this Tech Talk we will talk about what people mean by DevSecOps and deep dive into the different ...