All Apps and Add-ons

Why am I unable to edit or create lookups that are local to an app using Lookup File Editor?

dominiquevocat
SplunkTrust
SplunkTrust

I seem to be unable to edit/create non-globally shared lookups. I can call/link the editor view in other apps but i cannot edit or create lookups that are app specific using http://apps.splunk.com/app/1724/ (Lookup File Editor).

0 Karma
1 Solution

MuS
Legend

Hi dominiquevocat,

it happend to me, that I had to set the owner of a lookup file to nobody/no owner to be able to modify it using the editor.

View solution in original post

0 Karma

MuS
Legend

Hi dominiquevocat,

it happend to me, that I had to set the owner of a lookup file to nobody/no owner to be able to modify it using the editor.

0 Karma

theouhuios
Motivator

Have you checked the permissions for those lookup files and those Apps? You may have only read access to them.

Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...