Splunk Search

How to upload a lookup file to a Splunk Cloud "staging area" or through REST API?

jfgomez0912
Explorer

Hi,

In order to automate the deployment pipeline of Splunk Apps into different instances, our team has the requirement of uploading the lookups in our development environment (Splunk enterprise on-premise) to our production environment (Splunk Cloud) automatically.

After reading the Splunk REST API documentation, we encountered a way to move any file from a staging area to the lookups stored in the apps as follows:

https://host:mPort/services/data/lookup-table-files/{name}
POST
Modify a lookup table file by replacing it with a file from the upload staging area.

In order to get this type of automation, is there any way to upload a file to a Splunk Cloud "staging area", or is there any possibility to upload lookup via REST API to Splunk Cloud?

Thanks.

Labels (1)

danan5
Path Finder

Hi,

Did you ever find a way to programmatically upload to the staging area?

Regards,

0 Karma

chartastic
Explorer

Last I heard from support on the subject, this was not currently possible. Though this was July 2020 or so.

Get Updates on the Splunk Community!

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Index This | What goes away as soon as you talk about it?

May 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

What's New in Splunk Observability Cloud and Splunk AppDynamics - May 2025

This month, we’re delivering several new innovations in Splunk Observability Cloud and Splunk AppDynamics ...