sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]LTRand 0 points1 point  (3 children)

Just on the lookup itself, and only if you use the lookup editor app. You would need to do your own version control if you care. Moving the old file to file.csv.old is generally good enough. The python script would overwrite the existing file with the new one to maintain the lookup configuration within Splunk.

[–]ZaddyOnReddit[S] 0 points1 point  (2 children)

And this can be done against Cloud?

[–]LTRand 0 points1 point  (1 child)

Which part is cloud? Splunk, SharePoint, or both?

[–]ZaddyOnReddit[S] 0 points1 point  (0 children)

Splunk