https://community.splunk.com/t5/Splunk-Search/Lookup-table-errors-after-6-0-upgrade/m-p/121983#M32830 <P>Hi, after upgrading our search head from 4.3 to 6.0, we are getting error messages when doing custom searches.<BR /> The errors are reported from all the search peers (ex: awssplunkindex.yp1.ca). The search peers are enabled and replication is successful. The search peers are version 5.0 or 4.3.</P> <P>[awssplunkindex.yp1.ca] The lookup table 'http_status_lookup' does not exist. It is referenced by configuration 'apache'.<BR /> [awssplunkindex.yp1.ca] The lookup table 'logMapping_mobile' does not exist. It is referenced by configuration '24hrPC-cgi'.<BR /> [awssplunkindex.yp1.ca] The lookup table 'logMapping_mobile' does not exist. It is referenced by configuration '24hrPC-telus'. </P> <P>I tried disabling/enabling the search peers and restarting them, without success.</P> <P>Thank you for your help</P> Mon, 28 Sep 2020 15:08:31 GMT vathanal 2020-09-28T15:08:31Z https://community.splunk.com/t5/Splunk-Search/Lookup-table-errors-after-6-0-upgrade/m-p/121983#M32830 <P>Hi, after upgrading our search head from 4.3 to 6.0, we are getting error messages when doing custom searches.<BR /> The errors are reported from all the search peers (ex: awssplunkindex.yp1.ca). The search peers are enabled and replication is successful. The search peers are version 5.0 or 4.3.</P> <P>[awssplunkindex.yp1.ca] The lookup table 'http_status_lookup' does not exist. It is referenced by configuration 'apache'.<BR /> [awssplunkindex.yp1.ca] The lookup table 'logMapping_mobile' does not exist. It is referenced by configuration '24hrPC-cgi'.<BR /> [awssplunkindex.yp1.ca] The lookup table 'logMapping_mobile' does not exist. It is referenced by configuration '24hrPC-telus'. </P> <P>I tried disabling/enabling the search peers and restarting them, without success.</P> <P>Thank you for your help</P> Mon, 28 Sep 2020 15:08:31 GMT https://community.splunk.com/t5/Splunk-Search/Lookup-table-errors-after-6-0-upgrade/m-p/121983#M32830 vathanal 2020-09-28T15:08:31Z https://community.splunk.com/t5/Splunk-Search/Lookup-table-errors-after-6-0-upgrade/m-p/121984#M32831 <P>I am having the same issue. I suspect you followed the advice on <A href="http://answers.splunk.com/answers/35267/very-large-lookup-tables-exceeding-2gb-bundle-size">http://answers.splunk.com/answers/35267/very-large-lookup-tables-exceeding-2gb-bundle-size</A><BR /> which removes the lookups from your replication bundle. This is the desired behavior, but then automatic lookups fail. I am trying to find out how to enable automatic lookups only on Search Heads and not get the search error messages.</P> Tue, 18 Mar 2014 17:36:16 GMT https://community.splunk.com/t5/Splunk-Search/Lookup-table-errors-after-6-0-upgrade/m-p/121984#M32831 bmas10 2014-03-18T17:36:16Z