All Apps and Add-ons

Lookup tables not showing up in Lookup File Editor

bx10457
New Member

Hey,

Need some help with the soon-to-be Awesome Lookup File Editor App.

Two issues:

1) Lookup files not loading on IE version# 9.0.8 but is working on FireFox 28. Any settings I need to adjust on IE #9 for it too load?

2) Lookup tables not all showing up within app? Is there a limit on how many lookup tables can be viewed within the app? Presently only 28 lookup tables can be viewed. We have over a 100 tables ranging from 1K to 200M in size. Majority of the tables are under 10M.

I dont see any errors on the console or in the splunkd.log.

Any help would be greatly appreciated

Frank

Tags (1)
0 Karma

LukeMurphey
Champion

I'll try to get those issues fixed as soon as I can narrow down the problem. Could you answer the following to help me investigate it?

  1. Do you happen to notice an error in the IE console? I don't have an IE9 browser handy but I am looking into making or getting access to one.
  2. Do all of the lookup files get listed when you are log in and use the app as an admin?
  3. How many of the lookups are listed when you run the following search?

    | rest /servicesNS/admin/search/data/lookup-table-files | table title eai:acl.app eai:acl.owner

0 Karma

LukeMurphey
Champion

This app doesn't place any limits on the number of the files to be displayed. The app lists everything it gets from the /servicesNS/admin/search/data/lookup-table-files API call. That API call isn't returning everything for some reason. I just tested it on a system with about 400 lookup files and it worked perfectly. I recommend opening a support case and asking why this call doesn't seem to list of the lookups.

0 Karma

bx10457
New Member

I took a look at the meta-data file and all tables with ownership (Owner=username) do not show up but are displayed under settings->Lookup table files. We have over 250 lookup tables in our environment. Does this app place limits on amount of tables displayed within the gui?

0 Karma

bx10457
New Member

Going to manager->lookups, I can see all the tables.

0 Karma

LukeMurphey
Champion

Indeed, the meta-data may be the root cause. Do you know if the manager shows all of the lookup files?

0 Karma

bx10457
New Member

1) Within the console I was able to see that Browser Mode was set to "IE9 compatibility view". Once I switched it to regular IE9 mode, lookup tables were able to load.

2) My account is within the admin role

3) 26 tables show up under "Statistics". I wonder if the local.meta file has anything to do with it because the tables that do show up have "No owner" listed. All the other tables with Owner = username do not show up.

Thanks
Frank

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...