All Apps and Add-ons

Splunk Add-on for Microsoft IIS lookup issue on indexers

splunk_user4
Explorer

I have just updated the Splunk Add-on for Microsoft IIS and am hit with this issue with every search I run now

Could not load lookup=LOOKUP-iis_action_lookup 

[indexer1] Could not load lookup=LOOKUP-iis_action_lookup

[indexer2] Could not load lookup=LOOKUP-iis_action_lookup

[indexer3] Could not load lookup=LOOKUP-iis_action_lookup

ect..

The upgrade was from version 1.0.1-1.20, I am running on a linux splunk environment with a SH cluster and an Index Cluster.  The issue itself seems straight forward but I confirmed the lookup is on each indexer, and on the deployer .../master-apps/Splunk_TA_microsoft-iis/lookups.  Each application version matches on all search heads and indexers.

Labels (3)
0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.