https://community.splunk.com/t5/Splunk-Search/How-to-troubleshoot-Error-in-inputlookup-command-External-lookup/m-p/645144#M223401 <P>Error in 'inputlookup' command: External command based lookup 'es_notable_events' is not available because KV Store initialization has failed. Contact your system administrator.</P><P>&nbsp;</P><P>&nbsp;</P><P><SPAN>Okay I stopped and started Splunk on this server. now I am getting this key Value Store error how do I fix this?</SPAN></P><P>&nbsp;</P><P>&nbsp;</P> Tue, 30 May 2023 19:11:33 GMT Quantum 2023-05-30T19:11:33Z https://community.splunk.com/t5/Splunk-Search/How-to-troubleshoot-Error-in-inputlookup-command-External-lookup/m-p/644503#M223215 <P><SPAN>Hello I'm getting this error when I go into the Enterprise console and look at the security posture it's been going on for a few days any idea how to troubleshoot this?</SPAN></P> <P><SPAN>Thanks in advance</SPAN></P> <P>&nbsp;</P> <P><SPAN>I would appreciate the help as I am relatively new to Splunk and need some guidance.</SPAN></P> Wed, 24 May 2023 16:34:03 GMT https://community.splunk.com/t5/Splunk-Search/How-to-troubleshoot-Error-in-inputlookup-command-External-lookup/m-p/644503#M223215 quantum1 2023-05-24T16:34:03Z https://community.splunk.com/t5/Splunk-Search/How-to-troubleshoot-Error-in-inputlookup-command-External-lookup/m-p/645079#M223394 <P><SPAN>Is this a generic error,? I am very new to Splunk and I am sure that there is a relevant log that could give me more information on this what would that log be? would it be on one of the servers like the search head I am kind of lost here any help would be appreciated.</SPAN></P> Tue, 30 May 2023 17:07:06 GMT https://community.splunk.com/t5/Splunk-Search/How-to-troubleshoot-Error-in-inputlookup-command-External-lookup/m-p/645079#M223394 Quantum 2023-05-30T17:07:06Z https://community.splunk.com/t5/Splunk-Search/How-to-troubleshoot-Error-in-inputlookup-command-External-lookup/m-p/645141#M223399 <P><U><STRONG><EM>PreforkedSearchesManager-0] - preforked process=0/175613 died on exception (exit code=111): Error in 'inputlookup' command: External lookup table 'inputlookup' returned error code 13053. Results might be incorrect</EM></STRONG></U></P><P><SPAN>Okay I went into the Splunk D log and found this&nbsp; above does anybody know what this exit 111 means or where I can find more information about this error?</SPAN></P><P>&nbsp;</P><P>&nbsp;</P> Tue, 30 May 2023 18:51:32 GMT https://community.splunk.com/t5/Splunk-Search/How-to-troubleshoot-Error-in-inputlookup-command-External-lookup/m-p/645141#M223399 Quantum 2023-05-30T18:51:32Z https://community.splunk.com/t5/Splunk-Search/How-to-troubleshoot-Error-in-inputlookup-command-External-lookup/m-p/645144#M223401 <P>Error in 'inputlookup' command: External command based lookup 'es_notable_events' is not available because KV Store initialization has failed. Contact your system administrator.</P><P>&nbsp;</P><P>&nbsp;</P><P><SPAN>Okay I stopped and started Splunk on this server. now I am getting this key Value Store error how do I fix this?</SPAN></P><P>&nbsp;</P><P>&nbsp;</P> Tue, 30 May 2023 19:11:33 GMT https://community.splunk.com/t5/Splunk-Search/How-to-troubleshoot-Error-in-inputlookup-command-External-lookup/m-p/645144#M223401 Quantum 2023-05-30T19:11:33Z https://community.splunk.com/t5/Splunk-Search/How-to-troubleshoot-Error-in-inputlookup-command-External-lookup/m-p/645145#M223402 <P>trying this&nbsp;systemctl restart splunk</P> Tue, 30 May 2023 19:17:29 GMT https://community.splunk.com/t5/Splunk-Search/How-to-troubleshoot-Error-in-inputlookup-command-External-lookup/m-p/645145#M223402 Quantum 2023-05-30T19:17:29Z