splunk-pickaxe icon indicating copy to clipboard operation
splunk-pickaxe copied to clipboard

Published 20 hours ago • verified publisher icon cerner

Support for lookup files

Open kaustubhgadre opened this issue 5 years ago • 3 comments

Can we have support for a lookup CSV files [1] in pickaxe? We are intending to maintain a CSV file that stores some identifiers and their string descriptions and would like to have the ability to upload those automatically to all of our Splunk instances.

Pickaxe does not seem to have support for those at this moment.

[1] https://docs.splunk.com/Documentation/Splunk/8.0.2/Knowledge/LookupexampleinSplunkWeb

kaustubhgadre avatar Feb 27 '20 05:02 kaustubhgadre

I'm fine with supporting this but I don't really add new features or improvements anymore unless my group specifically needs it. I can however answer any questions, review and release things.

You would want to find the REST API reference like this. It doesn't seem like it would be too bad to add though

bbaugher avatar Feb 27 '20 15:02 bbaugher

+1 For adding this functionality, has any work been planned? Also, Do the Splunk REST APIs support create/update on lookups? I see the link you posted is for saved searches.

wseymour15 avatar Mar 04 '20 16:03 wseymour15

I haven't heard anyone say they were going to work on this. I'm not sure, you would have to check their docs, I just provided an example

bbaugher avatar Mar 04 '20 16:03 bbaugher