I've deployed Cisco IOS app.
Have following error on Search Head side:
[INDEXERSERVERNAME] Error 'Could not find all of the specified destination fields in the lookup table.' for conf 'cisco:ios' and lookup table 'cisco_ios_vendor'.
Should I deploy same app on Indexer Side?
To get rid of this delete the TA-cisco_ios and cisco_ios directories in $SPLUNK_HOME/etc/apps . Restart Splunk and reinstall the apps. That should remove all warning messages.
To get rid of this delete the TA-cisco_ios and cisco_ios directories in $SPLUNK_HOME/etc/apps . Restart Splunk and reinstall the apps. That should remove all warning messages.
That works, thank you!