About the Splunk App for Lookup File Editing

Use the Splunk App for Lookup File Editing to add and edit lookup files within the Splunk platform. Using the app, you can edit, import, and export both KV store and CSV file lookups in an interface similar to Microsoft Excel.

With the Splunk App for Lookup File Editing, you can do the following:

• Manage lookup files from within the Splunk platform
• Import CSV files into a lookup
• Import KV store data into a lookup
• Edit lookups within a GUI similar to Microsoft Excel
• Save a backup of a lookup and set a total backup size limit
• View or restore lookups using revision history

The Splunk App for Lookup File Editing also allows your lookups to work on search head cluster environments. Any edits you make to lookups propagate to your other search heads.

Install the Splunk App for Lookup File Editing

Download the Splunk App for Lookup File Editing from Splunkbase. The Splunk App for Lookup File Editing is compatible with Splunk Enterprise and Splunk Cloud Platform versions 8.2 and 9.0.

The 4.0 version of the Splunk App for Lookup File Editing is no longer available in Splunkbase due to errors related to special characters in CSV files. If you already downloaded the 4.0 version of the app and you're experiencing errors, upgrade to the Splunk App for Lookup File Editing 4.0.1.

See Known issues.

This app does not require any configuration. Using the Splunk Apps Manager, you can install the app by completing the following steps:

1. Log in to Splunk Web and go to Apps > Manage Apps.
2. Select Install app from file.
3. Locate the downloaded app file and select Upload.