The lookup table 'wmi_version_range_lookup' does not exist. It is referenced by configuration 'WMI:Version'
The lookup table 'windows_vendor_info_lookup' does not exist. It is referenced by configuration 'source::*:System'
Any ideas what this means
here is the short answer
Splunk> Manager » Apps » windows » Permissions
select "all apps" at the lower left corner of the GUI
MODERATOR EDIT: this issue is fixed in version 4.5.1 of the app, available now on Splunkbase.
Hi,
Are you seeing this right after you upgrade? Where (in what context) are you seeing this?
Worked like a charm, thanks!
here is the short answer
Splunk> Manager » Apps » windows » Permissions
select "all apps" at the lower left corner of the GUI
MODERATOR EDIT: this issue is fixed in version 4.5.1 of the app, available now on Splunkbase.
Here is the long answer from support
it seems that the default.meta for the Windows app includes an entry for [props] being exported system wide. In other words the props configurations which refer to the lookup tables are made Global, thus reference-able by all apps, however the lookups are not.
The solution would be to either
make the Windows app Global under App permissions OR make all the lookup table files Global under Manager/Lookups OR edit local.meta under etc/apps/windows/metadata and enter:
[props]
export = none
here is the short answer
Splunk> Manager » Apps » windows » Permissions
select "all apps" at the lower left corner of the GUI
I'm seeing this too. Hoping for some guidance to resolve.