topic Re: Could not load lookup=LOOKUP-useragentstrings in Splunk Enterprise

Could not load lookup=LOOKUP-useragentstrings

kareem — Wed, 31 Jul 2024 13:55:10 GMT

In Splunk ES and the platform, this error keeps appearing and I couldn't resolve it.
Could not load lookup=LOOKUP-useragentstrings

Re: Could not load lookup=LOOKUP-useragentstrings

inventsekar — Wed, 31 Jul 2024 14:41:38 GMT

Hi @kareem

Please search in the lookups and in the lookup definitions the automatic lookup named "useragentstrings", probably it's missed or there are some missed fields.

Could you pls copy paste the whole SPL query (remove hostnames, important details, etc)

Re: Could not load lookup=LOOKUP-useragentstrings

kareem — Mon, 05 Aug 2024 09:27:13 GMT

Even when I search for anything, it shows me this error.

Re: Could not load lookup=LOOKUP-useragentstrings

kareem — Mon, 05 Aug 2024 14:09:10 GMT

Even when I search for anything, it shows me this error, it's missed I couldn't find it in lookup, is there any source to downlow the lookup=LOOKUP-useragentstrings.csv