Splunk Search

How to update a lookup table using REST API?

polymorphic
Communicator

Hi all

Hope someone can help me with this.

I am building a custom application, which extracts data from a db and saves it as a lookup table csv file, and uploading the file to the staging dir (lookup_tmp)

My problem is that when i try to move the file from the staging dir and replacing with the lookup () already in place, i get:

curl -k -u admin:password https://localhost:8089/servicesNS/admin/search/data/lookup-table-files/lookup.csv \

-d eai:data=/opt/splunk/var/run/splunk/lookup_tmp/lookup.csv

"This resource can be found at http://localhost:8089/en-US/servicesNS/admin/search/data/lookup-table-files/lookup.csv."

HTTP code: "303"

303 meaning that the result should be found elsewhere. Can anybody tell me where that is?
I have been searching high an low and can't find anything that matches this problem.

I expected the result to be some atom xml, but this is obviously not what I'm getting.

Any advice would be great.

Tags (5)
0 Karma
1 Solution

polymorphic
Communicator

Found the answer on this.
I was beeing blocked by a load balancer.

View solution in original post

polymorphic
Communicator

Found the answer on this.
I was beeing blocked by a load balancer.

Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...