All Apps and Add-ons

Why am I unable to edit or create lookups that are local to an app using Lookup File Editor?

dominiquevocat
Motivator

I seem to be unable to edit/create non-globally shared lookups. I can call/link the editor view in other apps but i cannot edit or create lookups that are app specific using http://apps.splunk.com/app/1724/ (Lookup File Editor).

0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi dominiquevocat,

it happend to me, that I had to set the owner of a lookup file to nobody/no owner to be able to modify it using the editor.

View solution in original post

0 Karma

MuS
SplunkTrust
SplunkTrust

Hi dominiquevocat,

it happend to me, that I had to set the owner of a lookup file to nobody/no owner to be able to modify it using the editor.

0 Karma

theouhuios
Motivator

Have you checked the permissions for those lookup files and those Apps? You may have only read access to them.

Get Updates on the Splunk Community!

Security Highlights | November 2022 Newsletter

 November 2022 2022 Gartner Magic Quadrant for SIEM: Splunk Named a Leader for the 9th Year in a RowSplunk is ...

Platform Highlights | November 2022 Newsletter

 November 2022 Skill Up on Splunk with our New Builder Tech Talk SeriesCan you build it? Yes you can! *play ...

Splunk Education - Fast Start Program!

Welcome to Splunk Education! Splunk training programs are designed to enable you to get started quickly and ...