That is updated daily by processes external to Splunk and I want to import it as a kv lookup (it'll get large over time) to convert account numbers to client names. I'm primarily using the web UI for administration, but have delved a little bit into using .conf files.
What is the difference between a "lookup" and a "lookup file"?
What should the format for the input JSON be? An object, an array of objects?