icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

We are working on something new...

A Fresh New Splunkbase
We are designing a New Splunkbase to improve search and discoverability of apps. Check out our new and improved features like Categories and Collections. New Splunkbase is currently in preview mode, as it is under active development. We welcome you to navigate New Splunkbase and give us feedback.

Accept License Agreements

Thank You

Downloading Splunk App for Lookup File Editing
SHA256 checksum (splunk-app-for-lookup-file-editing_402.tgz) 9e4aab9e8d9f3fdd29fac42f20185b866bfc662badb3a56d65731a6783a34ca5 SHA256 checksum (splunk-app-for-lookup-file-editing_350.tgz) c8941e93c48b180b63f7a09bae72ccaae6c98357fd525ac5bd0de627dab96fc5 SHA256 checksum (splunk-app-for-lookup-file-editing_346.tgz) c73ef547c5e9cbcbe331007832a82972cdb32b75a773209014a9a0dfe61bbeda SHA256 checksum (splunk-app-for-lookup-file-editing_345.tgz) 417a161d0f29ce6e61809098bfdc88528a9c75513d335d0053c17e2f95e94fe0 SHA256 checksum (splunk-app-for-lookup-file-editing_344.tgz) 79e206b551471eebacef940be4cc3bd574cd263a0a939a755924daf8fb36be40 SHA256 checksum (splunk-app-for-lookup-file-editing_343.tgz) 8d6389f9d3af50570b5121eff8defd0abdafa40af42672c1ca068b1bbb9ce9b7 SHA256 checksum (splunk-app-for-lookup-file-editing_342.tgz) 118f045071b6d55ae5edd78639bd9d026fbdeb8de0166194783be3930e770c38 SHA256 checksum (splunk-app-for-lookup-file-editing_341.tgz) cf3ba0307d0392a13c029967dedd4aae81f24c8b99868a6102c41c0d4465eb58 SHA256 checksum (splunk-app-for-lookup-file-editing_340.tgz) 6e4a716ac26d8c94075f4a3be426262326087231afbcb2246b0ac551772a0475 SHA256 checksum (splunk-app-for-lookup-file-editing_333.tgz) 39d65c0b0472752306f650449b1e6e1c23f3cfcca15c7a21c923381a75c6508e SHA256 checksum (splunk-app-for-lookup-file-editing_332.tgz) 8e2720499cce7b8ad88a6eba77dbadaa7a80103bec1cdc80299fe4a0909e8061 SHA256 checksum (splunk-app-for-lookup-file-editing_331.tgz) a839e9d7c3a1bedb71a37854d00fa171e631c57190fabecb5479e3f04663bf7f SHA256 checksum (splunk-app-for-lookup-file-editing_33.tgz) 0e7c166152cd1a8c137678e975719d2b096a208a57cc99141cafe92b5ab7fa48 SHA256 checksum (splunk-app-for-lookup-file-editing_321.tgz) 0d4aa30b9a4cffd18297ceeaef30894459e615fab0600d544656b592608a49ba SHA256 checksum (splunk-app-for-lookup-file-editing_320.tgz) 832afeb7d8e4054ac5eecf66438a9c5c325b3f5b50bc0d87cfadf7d257b6af8e SHA256 checksum (splunk-app-for-lookup-file-editing_310.tgz) a998c5ac6c34a7705cefc2b3614602bb4e51b89ebe612fdde0fcb27e16130f43 SHA256 checksum (splunk-app-for-lookup-file-editing_305.tgz) be5c80d5cf9e8a50fe2dec4859e780714d043645b547d43cd3280dabb9f23608 SHA256 checksum (splunk-app-for-lookup-file-editing_304.tgz) 869bafa2cf727f03e84720cb35797f80ee067d3a9259d054f81ee72ae927565a SHA256 checksum (splunk-app-for-lookup-file-editing_303.tgz) b40b5a8f8bff81e2836b424f0096a768aced7ab2a8fb21add3bf24b06601763b SHA256 checksum (splunk-app-for-lookup-file-editing_302.tgz) 3daf85db96642d03a2bd2c5b323ef27b5a13a6ab256a294edf77275934f7b44f SHA256 checksum (splunk-app-for-lookup-file-editing_301.tgz) 6c24f53ab09e59851711c62c450d02257fbcc914cb9128aa8b86edf1ce40b6c6 SHA256 checksum (splunk-app-for-lookup-file-editing_300.tgz) a5f2580b06e269c64dd0fb3722661fe092b54bc53c1852d13bdb4c68a33d75e2 SHA256 checksum (splunk-app-for-lookup-file-editing_271.tgz) 506f6001612e546a03d8f18509faa865cf1d3f813d8b170d32a2dd0a359121f0 SHA256 checksum (splunk-app-for-lookup-file-editing_270.tgz) bc0691d9fdecfc2eaa11f24125530dac6188ce3a5cc7ff75124480502cf9f738 SHA256 checksum (splunk-app-for-lookup-file-editing_262.tgz) 49a268badc6b4807effcb365b751f331f544b94734e76bd8bc968649581408c6 SHA256 checksum (splunk-app-for-lookup-file-editing_261.tgz) de5f9eddeb3ade2d3776aa157b3c6e651f50a6df763375bfc2ab82190c71860c SHA256 checksum (splunk-app-for-lookup-file-editing_260.tgz) 339336e7c5f7ea2e40ca53b7ccf2297159b20b98433e7a17433cc2819a278175 SHA256 checksum (splunk-app-for-lookup-file-editing_250.tgz) 79b094fc79f2729ceb60d17f3a91e2bd457160a92692108d02d73e7122830c0e SHA256 checksum (splunk-app-for-lookup-file-editing_240.tgz) f40bd7e1a37ec948308243913cee92f33c7f69f2e505693e8be62cb45f649e0a SHA256 checksum (splunk-app-for-lookup-file-editing_234.tgz) db6c2e31865f6f9f65948b2935125425039b3a25e73c2dbe11c80170ea2bb121 SHA256 checksum (splunk-app-for-lookup-file-editing_233.tgz) 4a02efd77788387add46469feda9112ab41fd0301f13ad8029811ec099efc6f4 SHA256 checksum (splunk-app-for-lookup-file-editing_232.tgz) f2e509bbb3738504d3788953f0f3ea55961aec2b8c087e2eb3a63224becff893 SHA256 checksum (splunk-app-for-lookup-file-editing_231.tgz) 4ba7350604ec704d8fe9922672e1d5e3ecbe9bed82a64b2a70a14ab5ccd47380 SHA256 checksum (splunk-app-for-lookup-file-editing_23.tgz) 6b50a367e92bcec7af50a94c576fa4c2dfea9bdcea4513c337a91728e5186a4c SHA256 checksum (splunk-app-for-lookup-file-editing_22.tgz) b13c8619b329677f40a1d64e4fcb2254022293a91ee2e88e6078389684dfe907 SHA256 checksum (splunk-app-for-lookup-file-editing_212.tgz) 7262005fd95502b3b777dc52f0a0f8b14550131d721b32f782a320f1c497f0cb SHA256 checksum (splunk-app-for-lookup-file-editing_211.tgz) c10bad2542b755738ba9b4a7ba36627d6bf78e545bd9b7b195a50dd0faab3bf4 SHA256 checksum (splunk-app-for-lookup-file-editing_210.tgz) 8206d0b8e1468a592f3677a125e5389136d244bd77aeb88f7a296320b579aaad SHA256 checksum (splunk-app-for-lookup-file-editing_203.tgz) 9fdf9fffd21b86bff491d2a254013b3c84a5ddc0002e43980b0bd9bf196dfa9d SHA256 checksum (splunk-app-for-lookup-file-editing_202.tgz) 9efd5916907861f12f996340b0a8675919f8c80d7f140d7ae1952634460cc8bf SHA256 checksum (splunk-app-for-lookup-file-editing_201.tgz) 723ca4eebbcfb83af35e98ed38919d95da2d7e554bcbc1ee543f23ddb5a902d7 SHA256 checksum (splunk-app-for-lookup-file-editing_200.tgz) 00687075e9dd1ea5e329631fcf5ab3f90a427fa466838dc03a2bd8e1344e79aa
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate

splunk

Splunk App for Lookup File Editing

Splunk Cloud
Splunk Built
Overview
Details
Ever want to edit a lookup within Splunk with a user interface? Now you can. This app provides an Excel-like interface for editing, importing, and exporting lookup files (KV store and CSV-based).

This app also makes your lookups work in Search Head Clustered environments (edits to lookups will be propagated to other search heads).

Revision history is maintained for lookups so that you can view or restore older lookups quickly in the interface.

Check out the Documentation site:
https://docs.splunk.com/Documentation/LookupEditor

What's new https://docs.splunk.com/Documentation/LookupEditor/4.0.2/User/Whatsnew

Release Notes

Version 4.0.2
Oct. 18, 2023
Version 3.5.0
June 29, 2021

Adding support for jQuery 3 (and therefore support for newer versions of Splunk)

Version 3.4.6
July 17, 2020

1) Fixed XSS issue caused by older versions of third party libraries
2) Updated jexcel and jsuite libraries

Version 3.4.5
July 15, 2020

1) Fixed issue where you imports only worked for the few columns
2) Added a horizontal scrollbar

Version 3.4.4
June 25, 2020

Adding changes to address appinspect problems

Version 3.4.3
June 23, 2020

Added app manifest to indicate that the app only needs to be installed on the search head

Version 3.4.2
June 9, 2020

1) Fixing issue where an cell entry that was in the process of being edited was not saved
2) Making replication blacklist include the files with the ".default" extension.

Version 3.4.1
April 23, 2020

Fixed issue where values with some characters (such as "<" and ">") failed to appear

Version 3.4.0
April 14, 2020
  1. Added ability to search entries in the editor
  2. New KV store rows are no longer saved until the user sets a field
  3. Column name changes are done through a context menu which should make column renaming easier
  4. Replaced the handsontable library with jexcel
Version 3.3.3
Nov. 15, 2019

Adding Python 3 support

Version 3.3.2
June 27, 2019

1) Fixed issue where filtering on the lookup list didn't work correctly in some cases
2) Lookups can now be created when using the free license

Version 3.3.1
May 6, 2019

Fixed error when attempting to edit KV store lookup file

Version 3.3
May 2, 2019

1) Added support for CIDR and array KV store field types |
2) Fixed issue where time values in KV store lookups were being converted incorrectly

Version 3.2.1
March 8, 2019

Fixed issue where time values were not converted correctly

Version 3.2.0
Feb. 25, 2019

Replication of KV store collections is now optional; the editor gives you the option to disable replication

Version 3.1.0
Feb. 13, 2019

Numerous improvements to the editor (sorting support, bug fixes, etc.)

Version 3.0.5
Nov. 20, 2018

Lookup backup files are no longer replicated to the indexers (reduces bundle sizes)

Version 3.0.4
June 21, 2018

1) Fixing issue where app was incompatible with apps that had copied components from the Lookup Editor
2) Fixing issue where transform entry was made incorrectly for KV store lookups with a field name containing a space

Version 3.0.3
June 3, 2018

1) Fixing issue where time fields could be mis-interpreting and saved as "NaN"
2) Fixing double encoding issue causing lookups files to not be listed
3) Fixing issue where lookups that were user-owned by a user with a slash couldn't be loaded or deleted
4) New CSV lookup files are no longer created via direct access
5) Lookup creation was disallowed unnecessarily for CSVs for non-admins

Version 3.0.2
May 22, 2018

1) Fixing issue where lookup saving would be considered a failure when replication could not be forced
2) Added message noting that lookup file is being loaded
3) KV store lookup fields are correctly loaded when the fields are declared in transforms.conf

Version 3.0.1
May 14, 2018

1) Fixing issue where CSVs didn't loaded for some user names (such as those with slashes)
2) Fixing broken open-in-search link

Version 3.0.0
April 27, 2018

1) Added support for Splunk 7.1
2) Numerous user interface enhancements
3) Added ability to replicate lookup backup files in a Search Head Cluster (see https://lukemurphey.net/projects/splunk-lookup-editor/wiki/FAQ for how to enable it)
4) Added a link to open a lookup in search from the lookup editor
5) Added a dialog that will guide the user in creating a lookup transform in order to open it in search
6) Added support for editing on an iPad

Version 2.7.1
Sept. 4, 2017

Fixing issue where lookups with spaces in the names were allowed

Version 2.7.0
June 1, 2017

1) Importing CSV files into KV store lookups is now supported
2) KV store lookup files will be opened in the "nobody" owner context by default now
3) Fixed error message when deleting KV store row entries on Splunk 6.6
4) Edit ACLs page now opens in a new page

Version 2.6.2
May 20, 2017

1) CSV lookups with invalid characters can now be loaded
2) Added the search views to the navigation

Version 2.6.1
May 6, 2017

1) Improving styling on Splunk 6.6
2) Fixing refresh button on the lookup editor page which didn't work in some cases

Version 2.6.0
March 26, 2017

1) Added ability to refresh the lookup
2) Added link to edit lookup permissions from the list page
3) Fixed misaligned dropdown on the lookup list page
4) Improved the list of users on the KV lookup editor to make it easier to use when lots of users exist
5) Updated the icon

Version 2.5.0
Nov. 10, 2016

1) KV store lookups can now be disabled and enabled
2) Fixed issue where a user-made lookup file that had it's permissions set to shared could not be opened
3) Improved the styling of the lookups list page
4) Fixed incompatibilty with the Mobile Access Add-on

Version 2.4.0
Oct. 15, 2016

1) Added link to open lookups in search
2) Fixed issue where a KV store lookup with missing fields might cause the rows to not line up with the header

Version 2.3.4
Oct. 12, 2016

Fixed issue where the app could cause Splunk to make world writable files

Version 2.3.3
Sept. 30, 2016
  • Fixed issue where KV store lookups with boolean values didn't work on some versions of Splunk
  • Added support for Splunk 6.5
  • Fixed issue where you couldn't delete the first row on KV store lookups
Version 2.3.2
Sept. 13, 2016
  • Added ability to edit blank CSV files
  • Editor now works even if ES is installed
  • JSON blobs within columns can now be edited
Version 2.3.1
July 13, 2016

Fixed some issues on the lookup creation page

Version 2.3
July 7, 2016
  • Updated the table editor (various bug fixes)
  • Adding validation of numeric cells in KV lookups
  • Adding validation of time cells in KV lookups
  • Time values are now properly converted to epoch-seconds (a number) when being saved
  • Table is now re-rendered properly when switching user contexts
  • User interface improvements to the editor
  • Added export option to the editor
Version 2.2
June 20, 2016
  • Added ability to load KV store collections entries from other users
  • Fixed issue where the first row of KV store lookups could not be removed
  • Updated icon
Version 2.1.2
April 26, 2016

Press CTRL + E on the lookup edit page for a blast from the past!

Version 2.1.1
Feb. 19, 2016

Fixed issue where some lookups would not appear in the list

Version 2.1.0
Feb. 10, 2016

New features:
Added ability to make a user-specific lookup
Added ability to filter for user-specific lookups on the lookups list

Bugs fixes:
Updated the description of CSV lookups to note that CSV lookups do support SHC
Fixed an issue where a value of "null" would appear in the editor sometimes
Fixed an issue where the UI would not let you change the lookup name if new lookup creation failed * Added sourcetyping of the lookup editor controller logs
App now detects if you are using an older version of Splunk that doesn't support KV store and hides KV options
The editor no longer allows you to select a disabled app
The lookups list now includes the ability to filter on apps that only include KV lookups

Version 2.0.3
Dec. 4, 2015
  • Fixing compatibility issue with IE 11
  • Adding text to make it clear that KV store lookups will be automatically saved
  • Fixing issue where the renderer was not styling the cells correctly
Version 2.0.2
Nov. 29, 2015

Eliminating XSS issue on file import

Version 2.0.1
Nov. 26, 2015

Fix for XSS issue in HandsOnTable

Version 2.0.0
Nov. 19, 2015

Complete re-write, changes include:
* Support for KV store lookups
* Refreshed UI
* Dropped Splunk 5.0 support
* CSV lookups are now replicated (SHC support)


Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.