list_lookup_files
Discover and filter CSV lookup table files in Splunk to identify available data sources for analysis and reporting.
Instructions
List CSV lookup table files in Splunk. Returns metadata including name, filename, app, owner, sharing/permissions, and last updated time. Use this to discover available lookup files. To view the actual CSV content, use run_splunk_search with '| inputlookup '.
Args: owner (str, optional): Filter by owner. Default: 'nobody' (all users) app (str, optional): Filter by app context. Default: '-' (all apps) count (int, optional): Max results to return. 0=all, default: 50 for performance offset (int, optional): Result offset for pagination. Default: 0 search_filter (str, optional): Filter results (e.g., 'name=geo')
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| owner | No | nobody | |
| app | No | - | |
| count | No | ||
| offset | No | ||
| search_filter | No |