Splunk Search

lookuptable folder

Federica_92
Communicator

Hi to everyone, I have a quick question.
Using the splunk framework I have create different query that produce lookuptable, a few of these are stored in search/lookups, other are stored in mynewapp/lookups, how can I say to my splunk framework to store all the lookuptable in the search/lookups folder?

Tags (2)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

Run the search creating the lookup from the namespace of the search app.

View solution in original post

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Run the search creating the lookup from the namespace of the search app.

0 Karma

Federica_92
Communicator

Yes, the answer was " If the file doesn't exist, splunk create it in the app folder" Thank you

0 Karma

martin_mueller
SplunkTrust
SplunkTrust
0 Karma

Federica_92
Communicator

yes, but I have need to create the lookup file from the app

0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...