When clicking the app , the list of lookups is there and looks good. Clicking on Open in Search on the right works and shows the lookup fine.
Clicking on the lookup name on the left to view/edit it doesn't work and I get the "The requested lookup file does not exist" error.
I also get an error if I try to create a lookup in the editor: This lookup file could not be found.
This was not a problem in version 2.7.1.
This is due to a Splunk defect which causes it to cache old code from the prior version of the app. In this case, the users' browser is attempting to execute code from version 2.7.1 of the Lookup Editor against Splunk which now has version 3 of the Lookup Editor.
See the following post for a workaround to the issue: https://answers.splunk.com/answers/659194/how-do-i-clear-the-cache-to-see-the-changes-after-1.html
I am getting the same error (below) after upgrading from 2.7.1 to the newest (as of today) 3.3.2. File I checked the file name, and it is correct, with the correct case
Request Method: GET Status Code: 404
Not Found Remote Address:
10.241.43.132:443 Referrer Policy: no-referrer
HTTP/1.1 404 Not Found Date: Mon, 26
Aug 2019 21:37:34 GMT Content-Type:
Content-Encoding: gzip Vary:
Accept-Encoding, Cookie Connection:
expires=Tue, 27 Aug 2019 21:37:34 GMT;
httponly; Path=/; secure Server:
HTTP/1.1 Host: splunk-test.state.mo.us
Connection: keep-alive Accept:
application/xml, text/xml, /
User-Agent: Mozilla/5.0 (Windows NT
6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
Sec-Fetch-Mode: cors Sec-Fetch-Site:
same-origin Accept-Encoding: gzip,
deflate, br Accept-Language:
index=_internal (sourcetype="lookup_editor_controller" OR sourcetype=lookup_editor_rest_handler OR sourcetype=lookup_backups_rest_handler)
2019-08-26 15:49:11,710 INFO Loading lookup file from path=D:\Splunk\etc\apps\chargeback\lookups\customers.csv
2019-08-26 15:49:11,710 INFO Size of lookup file determined, file_size=408, path=D:\Splunk\etc\apps\chargeback\lookups\customers.csv
2019-08-26 15:49:11,710 INFO Resolved lookup file, path=D:\Splunk\etc\apps\chargeback\lookups\customers.csv
2019-08-26 15:49:11,663 INFO Retrieving lookup contents, namespace=chargeback, lookup=customers.csv, type=csv, owner=admin, version=None
I have an HAR file, where should I send it?
Can you please help determine if there is some similarity between the lookups that will not load? I can likely fix this quickly once I figure out why they are not loading. Things to look for would be:
Thanks for your response,below is my situation:
1.No,lookup file of all app can not been loaded
2.No,lookup file of any user also can not been loaded
3.Yes, All error message is the same. The message is "The requested lookup file does not exist".
And we try use different zone to load lookup file, like below.
And it work.
I saw this error too, I found the issue is due to a mismatch in case sensitive file systems.
the easy fix is to change the name of the file:
other option would be to edit these files:
and change the line:
If all else fails, see the below instructions on how to create a HAR file, and reach out to the developer.
I see these:
error:133 - Masking the original 404 message: 'The path '/en-US/custom/lookup_editor/lookup_edit/get_lookup_contents' was not found.' with 'Page not found!' for security reasons
error:133 - Masking the original 404 message: 'The path '/en-US/custom/lookup_editor/lookup_edit/get_lookup_backups_list' was not found.' with 'Page not found!' for security reasons
A few of these:
-0400 WARN HttpListener - Socket error from 10.10.10.111 while idling: error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown