<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Lookup table not work. in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Lookup-table-not-work/m-p/455871#M128884</link>
    <description>&lt;P&gt;Have you checked the search log on search head 3?&lt;/P&gt;</description>
    <pubDate>Sun, 18 Aug 2019 13:05:59 GMT</pubDate>
    <dc:creator>richgalloway</dc:creator>
    <dc:date>2019-08-18T13:05:59Z</dc:date>
    <item>
      <title>Lookup table not work.</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Lookup-table-not-work/m-p/455870#M128883</link>
      <description>&lt;P&gt;Hi Splunker;&lt;/P&gt;

&lt;P&gt;I have three search head cluster, and I running search automatically every day for update this the lookup table, and make search for exclude this result in lookup table from  search, when I execute the search at the same time in search head cluster, appeared result and the lookup table is work in SH1 and 2,  but when execute the search in search head 3 not appeared any results, why this behavior occurred, Please help me in that? and what is the reason?&lt;/P&gt;

&lt;P&gt;Best Regards&lt;/P&gt;</description>
      <pubDate>Sun, 18 Aug 2019 08:39:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Lookup-table-not-work/m-p/455870#M128883</guid>
      <dc:creator>aalhabbash1</dc:creator>
      <dc:date>2019-08-18T08:39:48Z</dc:date>
    </item>
    <item>
      <title>Re: Lookup table not work.</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Lookup-table-not-work/m-p/455871#M128884</link>
      <description>&lt;P&gt;Have you checked the search log on search head 3?&lt;/P&gt;</description>
      <pubDate>Sun, 18 Aug 2019 13:05:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Lookup-table-not-work/m-p/455871#M128884</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2019-08-18T13:05:59Z</dc:date>
    </item>
  </channel>
</rss>

