Splunk Apps » Lookup Editor

While users probably should never use spaces (_ and - are more enjoyable), Core Splunk does not permit spaces in filenames. The lookup editor DOES allow spaces. While we are working to train users, our huge user-base and sometimes a high turnover causes ongoing issues with Files Not Found, etc. Splunk 6.6.2 required lookups with spaces to not only be quoted but must usually pipe into NOOP and disable auto optimization. Otherwise, Lookups are not found in search, either. Spaces in filenames also adds additional challenges when working from CLI.