All Apps and Add-ons

Does anyone know how to limit the lookups displayed on the initial panel by keyword?

tattersp
Explorer

I want to only display a selected number of lookups when users go to this app, i.e., to show only lookups that contain the word oncall.

I was hoping that I could pass the URL a parameter that would force the initial search to display only lookups with oncall or force oncall into the selection list as a fixed default.

Any suggestion would be gratefully received.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi tattersp,
I don't know if it's possible to modify Lookup Editor App, probably.
I can suggest a workaround that I usually use in my apps:
In each App I have a menu section called "Lookups" where enabled users can access to all App lookups, something like this:

<collection label="Lookups">
   <collection label="Modify">
      <a href="/app/lookup_editor/lookup_edit?owner=nobody&amp;namespace=myApp&amp;lookup=myLookup1.csv&amp;type=csv">Lookup1</a>
      <divider />
   </collection>
   <collection label="Display">
      <view name="lookup1"/>
      <divider />
   </collection>
   <divider />
</collection>

In this way thare are some users that can only see lookup content using a dashboard and some users that are enabled to modify contents using Lookup Editor App..

Bye.
Giuseppe

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...