https://community.splunk.com/t5/Splunk-Search/Lookups-missing-and-receiving-error-message/m-p/500403#M139323 <P>Getting the following error on many of my previously working searches, any ideas on how to fix it?</P> <PRE><CODE> 3 errors occurred while the search was executing. Therefore, search results might be incomplete. Hide errors. Error 'Could not find all of the specified lookup fields in the lookup table.' for conf 'WMI:WinEventLog:Security' and lookup table 'windows_app_lookup'. Error 'Could not find all of the specified lookup fields in the lookup table.' for conf 'source::WinEventLog:Security' and lookup table 'windows_app_lookup'. Error 'Could not find all of the specified lookup fields in the lookup table.' for conf 'source::XmlWinEventLog:Security' and lookup table 'windows_app_lookup'. </CODE></PRE> <P>Anyone know what I'm missing?</P> Tue, 03 Dec 2019 15:58:24 GMT bullbo 2019-12-03T15:58:24Z https://community.splunk.com/t5/Splunk-Search/Lookups-missing-and-receiving-error-message/m-p/500403#M139323 <P>Getting the following error on many of my previously working searches, any ideas on how to fix it?</P> <PRE><CODE> 3 errors occurred while the search was executing. Therefore, search results might be incomplete. Hide errors. Error 'Could not find all of the specified lookup fields in the lookup table.' for conf 'WMI:WinEventLog:Security' and lookup table 'windows_app_lookup'. Error 'Could not find all of the specified lookup fields in the lookup table.' for conf 'source::WinEventLog:Security' and lookup table 'windows_app_lookup'. Error 'Could not find all of the specified lookup fields in the lookup table.' for conf 'source::XmlWinEventLog:Security' and lookup table 'windows_app_lookup'. </CODE></PRE> <P>Anyone know what I'm missing?</P> Tue, 03 Dec 2019 15:58:24 GMT https://community.splunk.com/t5/Splunk-Search/Lookups-missing-and-receiving-error-message/m-p/500403#M139323 bullbo 2019-12-03T15:58:24Z https://community.splunk.com/t5/Splunk-Search/Lookups-missing-and-receiving-error-message/m-p/500404#M139324 <P>see here:<BR /> <A href="https://answers.splunk.com/answers/667276/why-is-the-windows-app-lookup-giving-errors-in-spl.html">https://answers.splunk.com/answers/667276/why-is-the-windows-app-lookup-giving-errors-in-spl.html</A><BR /> <A href="https://answers.splunk.com/answers/677361/error-could-not-find-all-of-the-specified-lookup-f-2.html">https://answers.splunk.com/answers/677361/error-could-not-find-all-of-the-specified-lookup-f-2.html</A></P> Tue, 10 Dec 2019 20:22:59 GMT https://community.splunk.com/t5/Splunk-Search/Lookups-missing-and-receiving-error-message/m-p/500404#M139324 adonio 2019-12-10T20:22:59Z