Alright, I have found the problem. The partition of my server for / was full.
So when trying to upload the csv file (roughtly 1Mo), splunk first tries to copy it to /tmp (I guess) and fail.
Using scp and copying the lookup file directly in the good folder did the trick.
Unfortunately the error message given by splunk isn't very helpfull.
Hopes that helps
... View more