Splunk Search

lookuptable folder

Communicator

Hi to everyone, I have a quick question.
Using the splunk framework I have create different query that produce lookuptable, a few of these are stored in search/lookups, other are stored in mynewapp/lookups, how can I say to my splunk framework to store all the lookuptable in the search/lookups folder?

Tags (2)
0 Karma
1 Solution

SplunkTrust
SplunkTrust

Run the search creating the lookup from the namespace of the search app.

View solution in original post

0 Karma

SplunkTrust
SplunkTrust

Run the search creating the lookup from the namespace of the search app.

View solution in original post

0 Karma

Communicator

Yes, the answer was " If the file doesn't exist, splunk create it in the app folder" Thank you

0 Karma

SplunkTrust
SplunkTrust
0 Karma

Communicator

yes, but I have need to create the lookup file from the app

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!