Is there a REST API endpoint to display a lookup table's permissions?

[pkeller]

Looking for a way to report on whether a lookup table is exported to all apps by using a rest search.

Assuming the lookup is under an app named etc/apps/FOO/lookups ... is there a curl endpoint I can use to display the lookup's metadata?

Thx.

[somesoni2 · Accepted solution]

Here you go

http://docs.splunk.com/Documentation/Splunk/6.4.2/RESTREF/RESTknowledgeExamples#data.2Flookup-table-...

curl -k -u admin:pass https://localhost:8089/servicesNS/admin/search/data/lookup-table-files/lookup.csv

In the output, look for field eai:acl.sharing. If it's value is 'global', it's exported to all apps.

[pkeller]

Thank you. Much appreciated.