Splunk Search

How can I use lookups for a source CSV file that is not under the Splunk code tree?

nbharadwaj
Path Finder

How can I use lookups for a source CSV file that is not under the Splunk code tree?

I am using Splunk 4.0.10. CSV lookups work fine when the file is under the Splunk code base, but it doesn't work when I place the file in a random location (accessible) separate from the code base.

Tags (1)

gkanapathy
Splunk Employee
Splunk Employee

You can't. You could (on filesystems that support it) link the file from a Splunk lookups directory though.

Get Updates on the Splunk Community!

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...