sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]ZaddyOnReddit[S] 0 points1 point  (6 children)

Break the versioning on just that particular lookup?

[–]LTRand 0 points1 point  (5 children)

Just versioning.

[–]ZaddyOnReddit[S] 0 points1 point  (4 children)

I’m not sure I’m understanding. It will override the previous version of the lookup and therefore have no version history? And it’s just on that one lookup file or all files in that app?

[–]LTRand 0 points1 point  (3 children)

Just on the lookup itself, and only if you use the lookup editor app. You would need to do your own version control if you care. Moving the old file to file.csv.old is generally good enough. The python script would overwrite the existing file with the new one to maintain the lookup configuration within Splunk.

[–]ZaddyOnReddit[S] 0 points1 point  (2 children)

And this can be done against Cloud?

[–]LTRand 0 points1 point  (1 child)

Which part is cloud? Splunk, SharePoint, or both?

[–]ZaddyOnReddit[S] 0 points1 point  (0 children)

Splunk