Splunk Search

Sharing a dynamic lookup from an app

mw
Splunk Employee
Splunk Employee

I have a scripted lookup which is part of an app that I've written and it works perfectly. What's the proper way to share the lookup globally though? If I add "export = system" to the app's local.meta and then switch applications out of the containing app and into something like the Search app I get errors regarding the lookup not being found. Creating a symlink into etc/system/bin fixed the issue, but I'm guessing that's not the right way to handle this permanently...

Tags (1)
0 Karma

Matthias_BY
Communicator

Hi,

you need to set the lookup-objec to appear in All apps.

br
matthias

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...