List Lookup Files
list_lookup_filesList CSV lookup table files in Splunk and view their metadata, including name, owner, permissions, and last updated time. Use this to discover available lookup files for your searches.
Instructions
List CSV lookup table files in Splunk. Returns metadata including name, filename, app, owner, sharing/permissions, and last updated time. Use this to discover available lookup files. To view the actual CSV content, use run_splunk_search with '| inputlookup '.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| app | No | Filter by app context. Default: '-' (all apps) | - |
| count | No | Max results to return. 0=all, default: 50 for performance | |
| owner | No | Filter by owner. Default: 'nobody' (all users) | nobody |
| offset | No | Result offset for pagination. Default: 0 | |
| search_filter | No | Filter results (e.g., 'name=*geo*') |