search

cerner / splunk-pickaxe

A tool for syncing a repo of splunk objects with a splunk instance
Apache License 2.0
16 stars 15 forks source link

Support for lookup files #26

Open kaustubhgadre opened 4 years ago

kaustubhgadre commented 4 years ago

Can we have support for a lookup CSV files [1] in pickaxe? We are intending to maintain a CSV file that stores some identifiers and their string descriptions and would like to have the ability to upload those automatically to all of our Splunk instances.

Pickaxe does not seem to have support for those at this moment.

[1] https://docs.splunk.com/Documentation/Splunk/8.0.2/Knowledge/LookupexampleinSplunkWeb

bbaugher commented 4 years ago

I'm fine with supporting this but I don't really add new features or improvements anymore unless my group specifically needs it. I can however answer any questions, review and release things.

You would want to find the REST API reference like this. It doesn't seem like it would be too bad to add though

wseymour15 commented 4 years ago

+1 For adding this functionality, has any work been planned? Also, Do the Splunk REST APIs support create/update on lookups? I see the link you posted is for saved searches.

bbaugher commented 4 years ago

I haven't heard anyone say they were going to work on this. I'm not sure, you would have to check their docs, I just provided an example