Splunk Tutorial For Beginners | Common Mistakes | Deploying KV Lookups with a Deployment Server
The time may arise that a person decides to push a KV Lookup to a remote Splunk system using a Deployment Server. A major mistake people make is not realizing that Splunk stores KV lookup info inside a mongodb and that data is not transferred by the deployment server. The deployment server sends the metadata about how to create the mongodb data entry but doesn't send the actual lookup data.