Technology Add-on for pfSense Version 2.2.0 - 4 errors occurred while the search was executing

[johnny21]

Installed TA Addon Version 2.2.0 and it is almost working but get the error below, not sure exactly how to correct.

4 errors occurred while the search was executing. Therefore, search results might be incomplete. Hide errors.
Could not load lookup=LOOKUP-filterlog_action
Could not load lookup=LOOKUP-filterlog_tcpflags
Could not load lookup=LOOKUP-filterlog_transport
Could not load lookup=LOOKUP-openvpn_action

[Ledge39]

I'm also having the same problem.

Any help would be great.

[R0okey]

• Trying to install this integration for pfsense 2.5 and I’m getting the same errors. Any advice?

4 errors occurred while the search was executing. Therefore, search results might be incomplete.

• Could not load lookup=LOOKUP-filterlog_action
• Could not load lookup=LOOKUP-filterlog_tcpflags
• Could not load lookup=LOOKUP-filterlog_transport
• Could not load lookup=LOOKUP-openvpn_action

[my2ndhead · Accepted solution]

Due to changes in the add-on build process the lookups were missing. Fixed in 2.2.1.

[kenzo1234]

with splunk 8.2.1, pfSense 2.5.1

installed app ta_pfsense 2.5.0

I get those 4 errors as well. what can I do to fix it. 

[fattylewis]

Grab version 2.2.1 and copy the lookups directory from it and put it into 2.2.0 apps/TA-pfsense directory.

[nervatan]

I'm having the same problem with version 2.5.0 

[o0chris0o]

Did you figure out what was wrong?  I have the same problem with 2.5.0 and Splunk 8.2.0. I use universal forwarder on my pfsense to get the data in Splunk.

[fattylewis]

Download version 2.2.1 from splunkbase and grab the lookups directory from it and put it in the apps/TA-pfsense directory.

Worked for me just now.