Splunk Search

How to restore the data lost from a lookup file that was overwritten by the outputlookup command?

New Member

I was using one lookup file in dashboards. Mistakenly, the outputlookup command was fired and the file was overwritten by a blank file.
Is there a way to restore the data back to the .csv file.

0 Karma



I am not aware of any restore function at all. This is what backups are for.

You should be able to find the lookup file in the corresponding app.

Kind Regards

0 Karma