https://community.splunk.com/t5/Splunk-Search/Why-is-there-an-issue-with-Enterprise-Security-access-for/m-p/398234#M115510 <P>Hello,</P> <P>We have an issue with the access to lookup tables generated by Splunk DB Connect. The tables are shared for all apps and everyone has a read access to it.</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/5245iE3E29F8A9CD00936/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>But when we try to call for those lookups from Enterprise Security we have an error “The lookup table 'xxx.csv' does not exist or is not available.” At the same time, the lookups are perfectly usable from Search &amp; Reportings.</P> <P>Could you tell please what we doing wrong?</P> <P>Thanks for the help.</P> <P>Regards,<BR /> Alex.</P> Wed, 20 Jun 2018 15:37:46 GMT AlexeySh 2018-06-20T15:37:46Z https://community.splunk.com/t5/Splunk-Search/Why-is-there-an-issue-with-Enterprise-Security-access-for/m-p/398234#M115510 <P>Hello,</P> <P>We have an issue with the access to lookup tables generated by Splunk DB Connect. The tables are shared for all apps and everyone has a read access to it.</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/5245iE3E29F8A9CD00936/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>But when we try to call for those lookups from Enterprise Security we have an error “The lookup table 'xxx.csv' does not exist or is not available.” At the same time, the lookups are perfectly usable from Search &amp; Reportings.</P> <P>Could you tell please what we doing wrong?</P> <P>Thanks for the help.</P> <P>Regards,<BR /> Alex.</P> Wed, 20 Jun 2018 15:37:46 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-there-an-issue-with-Enterprise-Security-access-for/m-p/398234#M115510 AlexeySh 2018-06-20T15:37:46Z https://community.splunk.com/t5/Splunk-Search/Why-is-there-an-issue-with-Enterprise-Security-access-for/m-p/398235#M115511 <P>Assuming you are using the dbxlookup command or dbxquery command, you need to go to the "manage app" page and select "View objects for the DB Connect app. On that page, you will see dbxlookup, dbxquery, etc. and will need to make sure Sharing is set to Global for this capability. I think that might be the issue, especially if you are using those commands.</P> Wed, 20 Jun 2018 17:14:08 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-there-an-issue-with-Enterprise-Security-access-for/m-p/398235#M115511 pdaigle_splunk 2018-06-20T17:14:08Z https://community.splunk.com/t5/Splunk-Search/Why-is-there-an-issue-with-Enterprise-Security-access-for/m-p/398236#M115512 <P>See “importing add ons with different naming convention” here:</P> <P><A href="https://docs.splunk.com/Documentation/ES/5.1.0/Install/ImportCustomApps">https://docs.splunk.com/Documentation/ES/5.1.0/Install/ImportCustomApps</A></P> <P>In ESS you have to edit a regular expression that tells ESS which apps to import.</P> Thu, 21 Jun 2018 03:54:48 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-there-an-issue-with-Enterprise-Security-access-for/m-p/398236#M115512 jkat54 2018-06-21T03:54:48Z https://community.splunk.com/t5/Splunk-Search/Why-is-there-an-issue-with-Enterprise-Security-access-for/m-p/398237#M115513 <P>Hello @jkat54</P> <P>Yep, that's exactly what I had to do.</P> <P>Thanks for the help!</P> <P>Alex.</P> Thu, 21 Jun 2018 07:22:58 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-there-an-issue-with-Enterprise-Security-access-for/m-p/398237#M115513 AlexeySh 2018-06-21T07:22:58Z https://community.splunk.com/t5/Splunk-Search/Why-is-there-an-issue-with-Enterprise-Security-access-for/m-p/398238#M115514 <P>Hello @pdaigle_splunk </P> <P>You're right, we use dbxquery command. But it is already global.<BR /> But thanks for your answer and for your time!</P> <P>The real cause was discribed by @jkat54</P> Thu, 21 Jun 2018 07:25:55 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-there-an-issue-with-Enterprise-Security-access-for/m-p/398238#M115514 AlexeySh 2018-06-21T07:25:55Z https://community.splunk.com/t5/Splunk-Search/Why-is-there-an-issue-with-Enterprise-Security-access-for/m-p/398239#M115515 <P>Hello @AlexeySh.....no worries....glad you were able to get an answer.</P> Thu, 21 Jun 2018 14:30:29 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-there-an-issue-with-Enterprise-Security-access-for/m-p/398239#M115515 pdaigle_splunk 2018-06-21T14:30:29Z