Hi to everyone, I have a quick question.
Using the splunk framework I have create different query that produce lookuptable, a few of these are stored in search/lookups, other are stored in mynewapp/lookups, how can I say to my splunk framework to store all the lookuptable in the search/lookups folder?
Run the search creating the lookup from the namespace of the search app.
Run the search creating the lookup from the namespace of the search app.
Yes, the answer was " If the file doesn't exist, splunk create it in the app folder" Thank you
So... are you looking for this? http://docs.splunk.com/Documentation/Splunk/6.2.2/SearchReference/outputlookup
yes, but I have need to create the lookup file from the app