Splunk Search

How to upload a lookup file to a Splunk Cloud "staging area" or through REST API?

jfgomez0912
Explorer

Hi,

In order to automate the deployment pipeline of Splunk Apps into different instances, our team has the requirement of uploading the lookups in our development environment (Splunk enterprise on-premise) to our production environment (Splunk Cloud) automatically.

After reading the Splunk REST API documentation, we encountered a way to move any file from a staging area to the lookups stored in the apps as follows:

https://host:mPort/services/data/lookup-table-files/{name}
POST
Modify a lookup table file by replacing it with a file from the upload staging area.

In order to get this type of automation, is there any way to upload a file to a Splunk Cloud "staging area", or is there any possibility to upload lookup via REST API to Splunk Cloud?

Thanks.

Labels (1)

danan5
Path Finder

Hi,

Did you ever find a way to programmatically upload to the staging area?

Regards,

0 Karma

chartastic
Explorer

Last I heard from support on the subject, this was not currently possible. Though this was July 2020 or so.

Get Updates on the Splunk Community!

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...