Splunk Search

How to update a lookup table using REST API?

polymorphic
Communicator

Hi all

Hope someone can help me with this.

I am building a custom application, which extracts data from a db and saves it as a lookup table csv file, and uploading the file to the staging dir (lookup_tmp)

My problem is that when i try to move the file from the staging dir and replacing with the lookup () already in place, i get:

curl -k -u admin:password https://localhost:8089/servicesNS/admin/search/data/lookup-table-files/lookup.csv \

-d eai:data=/opt/splunk/var/run/splunk/lookup_tmp/lookup.csv

"This resource can be found at http://localhost:8089/en-US/servicesNS/admin/search/data/lookup-table-files/lookup.csv."

HTTP code: "303"

303 meaning that the result should be found elsewhere. Can anybody tell me where that is?
I have been searching high an low and can't find anything that matches this problem.

I expected the result to be some atom xml, but this is obviously not what I'm getting.

Any advice would be great.

Tags (5)
0 Karma
1 Solution

polymorphic
Communicator

Found the answer on this.
I was beeing blocked by a load balancer.

View solution in original post

polymorphic
Communicator

Found the answer on this.
I was beeing blocked by a load balancer.

Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...