All Apps and Add-ons

Lookup editor - application labels with parentheses fail to show lookup files

gjanders
SplunkTrust
SplunkTrust

In lookup file editor 3.3.1, I found that if the application label includes certain special characters, in this case parentheses, the app dropdown results in "No matching records found"

For example if my application label is "Test (test)", then on the global screen of the lookup editor I can see the lookups within the application.
However if I choose the app from the dropdown menu, then No matching records found appears.

I suspect this relates to the javascript the app is using to filter the results, is it possible to have this fixed?

Thanks

0 Karma
1 Solution

LukeMurphey
Champion

I opened a bug opened to get this fixed in the next maintenance release: https://lukemurphey.net/issues/2433

View solution in original post

0 Karma

LukeMurphey
Champion

I opened a bug opened to get this fixed in the next maintenance release: https://lukemurphey.net/issues/2433

0 Karma

gjanders
SplunkTrust
SplunkTrust

To be clear, if I rename the label of the app (not the app itself) to test_test the filtering in the lookup editor app works just fine

The app directory on disk never had the parentheses in it...(only the label)

0 Karma

DavidHourani
Super Champion

Hi @gjanders,

Are the names fixed and unchangeable ? Would it be easier for you to define a strict naming convention for knowledge objects to avoid having special characters in them ? That would save you a lot of time and trouble. It will also allow you to sort more easily on the objects and group them as needed.

Something like sales_accounts.csv, sales_products.csv would be easier to maintain compared to test (test) sales

0 Karma

gjanders
SplunkTrust
SplunkTrust

@DavidHourani perhaps my wording was not clear enough. It is the application label that matters, not the CSV file name. We would not let someone use special characters in the CSV / lookup name itself.

As a workaround we have changed the label of the applications in question, but when the application label is Test ( test ), then the lookup editor shows 0 lookups when filtering to it...

But the lookups remain visible if you do not narrow down to the app within the lookup editor.

Changing the application label resolves the issue.

0 Karma

DavidHourani
Super Champion

ouch... nice catch, I hope one of the lookup file editor sees this post to fix that for next version..

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...