Splunk Search

Is there a way to make automatic lookups only use the local lookup table that exists on my search head?

Flynt
Splunk Employee
Splunk Employee

From my search flashtimeline I can tell my search head in a distributed environment to only use the local lookup file by adding local=true to my lookup statement. Is there a way to make automatic lookups only use the local lookup table that exists on my Search Head?

Labels (1)
1 Solution

hexx
Splunk Employee
Splunk Employee

Looking at props.conf.spec and transforms.conf.spec, there doesn't seem to be a way to configure an automatic lookup to occur only locally on the search-head.

Time to file an enhancement request!

View solution in original post

nunoaragao
Explorer

To @potnuru  and others that might fall here .. there is a setting on transforms.conf called replicate to: 

Indicates whether to replicate CSV lookups to indexers

 

rquish
Engager

This is the solution I was looking for. The lookup definition UI does not have the option to keep it local like the SPL does. This is effectively making the lookup local wherever/whenever called.

Thanks for insight... better late than never 🙂

0 Karma

hexx
Splunk Employee
Splunk Employee

Looking at props.conf.spec and transforms.conf.spec, there doesn't seem to be a way to configure an automatic lookup to occur only locally on the search-head.

Time to file an enhancement request!

potnuru
Path Finder

Hi @hexx Is there a way to configure an automatic lookup to occur only locally on the search-head now?

0 Karma
Get Updates on the Splunk Community!

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...

New Articles from Academic Learning Partners, Help Expand Lantern’s Use Case Library, ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Your Guide to SPL2 at .conf24!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...