I was attempting to install the SplunkTAopenldap addon, and after installation I am getting the following error:
The lookup table 'openldapsrclookup' does not exist. It is referenced by configuration 'openldap:access'.
Does anyone have any suggestions on how to correct this?
Splunk Version - 6.4.1
Here is what I have in Lookup definitions:
openldapsrclookup kvstore key, conn, src No owner SplunkTA_openldap Global | Permissions Enabled | Disable Clone
openldapuserlookup kvstore key, conn, op, user No owner SplunkTA_openldap Global | Permissions Enabled | Disable Clone
I figured out what it was. Server Certificate had expired.
Followed this post:
View solution in original post