https://community.splunk.com/t5/Deployment-Architecture/distributed-search-error/m-p/70655#M2448 <P>This was an error fixed by chown....</P> Tue, 06 Sep 2011 18:10:25 GMT DTERM 2011-09-06T18:10:25Z https://community.splunk.com/t5/Deployment-Architecture/distributed-search-error/m-p/70654#M2447 <P>I;ve setup a search head with a custom app I've created. The search head appears to work. That is, it answers the queries and produces the charts and graphs remotely. However I get the following error on every execution within the application.</P> <P>[splunk] The lookup table 'wksh_action_lookup' does not exist. It is referenced by configuration 'syslog'.</P> <P>What does that mean? How to fix it? Thanks.</P> Mon, 28 Sep 2020 09:52:22 GMT https://community.splunk.com/t5/Deployment-Architecture/distributed-search-error/m-p/70654#M2447 DTERM 2020-09-28T09:52:22Z https://community.splunk.com/t5/Deployment-Architecture/distributed-search-error/m-p/70655#M2448 <P>This was an error fixed by chown....</P> Tue, 06 Sep 2011 18:10:25 GMT https://community.splunk.com/t5/Deployment-Architecture/distributed-search-error/m-p/70655#M2448 DTERM 2011-09-06T18:10:25Z