list_lookup_files
List Splunk CSV lookup files and view metadata including name, app, owner, and last update time to discover available lookup tables.
Instructions
List CSV lookup table files in Splunk. Returns metadata including name, filename, app, owner, sharing/permissions, and last updated time. Use this to discover available lookup files. To view the actual CSV content, use run_splunk_search with '| inputlookup '.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| owner | No | Filter by owner. Default: 'nobody' (all users) | nobody |
| app | No | Filter by app context. Default: '-' (all apps) | - |
| count | No | Max results to return. 0=all, default: 50 for performance | |
| offset | No | Result offset for pagination. Default: 0 | |
| search_filter | No | Filter results (e.g., 'name=*geo*') |