https://community.splunk.com/t5/Splunk-Search/Why-am-I-getting-lookup-search-error-quot-server-x-Script-for/m-p/204845#M59517 <P>We are using Splunk version 6.3 and facing an issue with a lookup table. While running the search, it returns below errors. FYI: we have defined the lookup table on a search head.</P> <P>Search:</P> <PRE><CODE>index=sample sourcetype=data referer="https://example.com/" | lookup user_agents user_agent | chart count by ua_family </CODE></PRE> <P>Error:</P> <PRE><CODE>[indexer 1] Script for lookup table 'user_agents' returned error code 1. Results may be incorrect. [indexer 2] Script for lookup table 'user_agents' returned error code 1. Results may be incorrect. </CODE></PRE> <P>Thanks,<BR /> raj</P> Mon, 18 Apr 2016 08:19:44 GMT cdcproject 2016-04-18T08:19:44Z https://community.splunk.com/t5/Splunk-Search/Why-am-I-getting-lookup-search-error-quot-server-x-Script-for/m-p/204845#M59517 <P>We are using Splunk version 6.3 and facing an issue with a lookup table. While running the search, it returns below errors. FYI: we have defined the lookup table on a search head.</P> <P>Search:</P> <PRE><CODE>index=sample sourcetype=data referer="https://example.com/" | lookup user_agents user_agent | chart count by ua_family </CODE></PRE> <P>Error:</P> <PRE><CODE>[indexer 1] Script for lookup table 'user_agents' returned error code 1. Results may be incorrect. [indexer 2] Script for lookup table 'user_agents' returned error code 1. Results may be incorrect. </CODE></PRE> <P>Thanks,<BR /> raj</P> Mon, 18 Apr 2016 08:19:44 GMT https://community.splunk.com/t5/Splunk-Search/Why-am-I-getting-lookup-search-error-quot-server-x-Script-for/m-p/204845#M59517 cdcproject 2016-04-18T08:19:44Z https://community.splunk.com/t5/Splunk-Search/Why-am-I-getting-lookup-search-error-quot-server-x-Script-for/m-p/204846#M59518 <P>You should add <CODE>local=true</CODE> to your lookup command. It indicates that loookup table is defined on searchhead:</P> <PRE><CODE>index=sample sourcetype=data referer="https://example.com/" | lookup local=true user_agents user_agent | chart count by ua_family </CODE></PRE> Wed, 22 Feb 2017 12:28:16 GMT https://community.splunk.com/t5/Splunk-Search/Why-am-I-getting-lookup-search-error-quot-server-x-Script-for/m-p/204846#M59518 marhuc 2017-02-22T12:28:16Z