Use cribl_lookupdate to automate lookup file updates. You can either upload a whole new file, or just append a new row. It should work with either self-managed or Cloud Leaders.
- python 3
- requests module
- Cribl python-api-wrapper
- A working distributed Cribl installation
- If it's in the Cloud, you'll need API credentials set-up: Account -> Organization -> API Management
There is a help message if you run with no args.
Sample run to append a new row consisting of 1, 2 to the existing lookup file test.csv in the Worker Group Lab:
$ python3 cribl_lookupdate.py -l https://main-<your-instance>.cribl.cloud/api/v1 -u <apiuserkey> -P <apiusersecret> -g Lab -f test.csv -a '1,2'
bueno
Sample run same as above, but upload the local file test.csv to replace test.csv on the leader (leave off the -a args):
$ python3 cribl_lookupdate.py -l https://main-<your-instance>.cribl.cloud/api/v1 -u <apiuserkey> -P <apiusersecret> -g Lab -f test.csv'
bueno
If you have an environment variable named CRIBL_AUTH_TOKEN the script will use that instead of authenticating with a userid and password.