Splunk Search

How can I use lookups for a source CSV file that is not under the Splunk code tree?

nbharadwaj
Path Finder

How can I use lookups for a source CSV file that is not under the Splunk code tree?

I am using Splunk 4.0.10. CSV lookups work fine when the file is under the Splunk code base, but it doesn't work when I place the file in a random location (accessible) separate from the code base.

Tags (1)

gkanapathy
Splunk Employee
Splunk Employee

You can't. You could (on filesystems that support it) link the file from a Splunk lookups directory though.

Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...