Splunk Search

Moving the lookup table from One SH to another SH?

AL3Z
Builder

Hi,

I have created a dynamic lookup table in one of the search head  using a search ,now i want  it to move to another search head and shedule it, how could we achieve it.


 

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Use the Splunk App for Lookup File Editing (https://splunkbase.splunk.com/app/1724).  Export the lookup on the first SH and import it using the same app on the other SH.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...