All Apps and Add-ons

Why am I unable to edit or create lookups that are local to an app using Lookup File Editor?

dominiquevocat
SplunkTrust
SplunkTrust

I seem to be unable to edit/create non-globally shared lookups. I can call/link the editor view in other apps but i cannot edit or create lookups that are app specific using http://apps.splunk.com/app/1724/ (Lookup File Editor).

0 Karma
1 Solution

MuS
Legend

Hi dominiquevocat,

it happend to me, that I had to set the owner of a lookup file to nobody/no owner to be able to modify it using the editor.

View solution in original post

0 Karma

MuS
Legend

Hi dominiquevocat,

it happend to me, that I had to set the owner of a lookup file to nobody/no owner to be able to modify it using the editor.

0 Karma

theouhuios
Motivator

Have you checked the permissions for those lookup files and those Apps? You may have only read access to them.

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...