Since upgrading to 6.0 I see error "The lookup table 'minemeldfeeds_lookup' does not exist. It is referenced by configuration 'pan:threat'." for all my indexers

[darlas]

Hi.

Since upgrading the Palo Alto App to 6.0 I see error "The lookup table 'minemeldfeeds_lookup' does not exist. It is referenced by configuration 'pan:threat'." for all my indexers.

I find these references in:

SplunkforPaloAltoNetworks/default/data/ui/views/incident_feed.xml

Oddly, I only see this in dashboards for OTHER apps, not when I am in the Splunk App. I did change app permissions to be Global but it did not help.

Any ideas what the issue is?

Thanks!

[BillBaker]

Installed 6.0.1- still have the issue - new suggestions?

[hcannon]

We were having this issue as well, looks like they fixed it in the 6.0.1 update they just released for the app and TA, errors stopped after upgrade.

[darlas]

Thanks! I will upgrade to 6.0.1 and see if the issue goes away!

[darlas]

correction. I now see this same error in dashboard panels in Palo Alto app