Skip to content

Lookups for the Splunk Add-on for GitHub

The Splunk Add-on for GitHub has the following lookups. The lookups files are located in $SPLUNK_HOME/etc/apps/Splunk_TA_github/lookups

File name Description
github_action_related_info_300.csv Outputs action, status, change_type, and event_group based on action in the event.
github_cloud_action_lookup_300.csv Oututs event_group, action, change_type, and object_category based on action in the event