Splunk Apps » Lookup Editor

Hi Luke,

Hope you are doing well!

I am from Accenture (India location) and using your designed app in our environment since long back. Starting of current month, we migrated our Splunk Core env to latest version 8.0.4.1 so that we have to upgrade this lookup editor app to 3.4.6 version as well for compatibility purpose. Earlier we were using 2.3.1 version of the lookup editor app.

But since approx 4 weeks we started facing some issues with lookup files available in the app. While we tried to open those lookup files in edit mode, we can add that entry but after we added entries in the lookup and save it post that we are unable to open it and gets the error message "lookup could not be loaded from the server"

For your reference, when we checked the lookup at the backend and found that there was a special character ("^@") added by itself in the last line of the file content due to which we were not able to open csv lookup file in the “Lookup File Editor” App. This special character is not visible from the UI side.

I have checked all the known issues\bugs on your app support portal but nothing was available there related this issue.

Could I request you to please analyze the issue and suggest any solution for this.

Your help will be highly appreciated !