What's new in the Splunk App for Lookup File Editing
Here's what's new in each version of the Splunk App for Lookup File Editing.
The following table lists the new features included in this release of the Splunk App for Lookup File Editing:
|Toggle switch to turn on or turn off a KV store lookup on the Lookups page
|Turn on or turn off a KV store lookup. You can also see the total number of backups for each lookup, the total backup size for each lookup, and the current size of each lookup. See Review your saved lookup files and Create a new lookup in the Splunk App for Lookup File Editing.
|Overview dashboard in the Health tab
|Manage your lookup files using metrics and visualizations on lookup file size, backups, and more. For example, you can track CSV lookups using a table visualization sorted by total backup size. See Review lookup file metrics and logs with dashboards.
|Severity filter for the Logs dashboard in the Health tab
|Select a severity type for your logs to filter the Logs dashboard. Dashboard panels include Logs by Severity (over time), Log Severity, and Latest Log. You can also select results within these panels to open a new search. See Review lookup file metrics and logs with dashboards.
|Backups and modifiable backup size limit for CSV lookups
|Save a backup for your CSV lookup. To prevent backups from filling up disk storage, you can edit the total backup size limit for a CSV lookup while creating a new CSV lookup or editing an existing one. See Edit the backup size limit for CSV lookups.
|Create and modify dashboards from the Search tab using the Splunk App for Lookup File Editing dashboards built with the Splunk Dashboard framework.
This is the first Splunk supported release of the Splunk App for Lookup File Editing.
The Splunk App for Lookup File Editing is now part of the Splunk security portfolio and fully supported with an active Splunk Cloud or Splunk Enterprise license. No matter how you choose to deploy Splunk, you can edit, import, and export both KV store and CSV file lookups in an interface similar to Microsoft Excel with the Splunk App for Lookup File Editing.
Troubleshoot the Splunk App for Lookup File Editing
This documentation applies to the following versions of Splunk® App for Lookup File Editing: 4.0.0