All Apps and Add-ons

Technology Add-on for pfSense Version 2.2.0 - 4 errors occurred while the search was executing

johnny21
Path Finder

Installed TA Addon Version 2.2.0 and it is almost working but get the error below, not sure exactly how to correct.

4 errors occurred while the search was executing. Therefore, search results might be incomplete. Hide errors.
Could not load lookup=LOOKUP-filterlog_action
Could not load lookup=LOOKUP-filterlog_tcpflags
Could not load lookup=LOOKUP-filterlog_transport
Could not load lookup=LOOKUP-openvpn_action

0 Karma
1 Solution

my2ndhead
SplunkTrust
SplunkTrust

Due to changes in the add-on build process the lookups were missing. Fixed in 2.2.1.

View solution in original post

0 Karma

Ledge39
Engager

I'm also having the same problem.

Any help would be great.

0 Karma

R0okey
New Member
  • Trying to install this integration for pfsense 2.5 and I’m getting the same errors. Any advice?
4 errors occurred while the search was executing. Therefore, search results might be incomplete.
  • Could not load lookup=LOOKUP-filterlog_action
  • Could not load lookup=LOOKUP-filterlog_tcpflags
  • Could not load lookup=LOOKUP-filterlog_transport
  • Could not load lookup=LOOKUP-openvpn_action
0 Karma

my2ndhead
SplunkTrust
SplunkTrust

Due to changes in the add-on build process the lookups were missing. Fixed in 2.2.1.

0 Karma

kenzo1234
Observer

with splunk 8.2.1, pfSense 2.5.1

installed app ta_pfsense 2.5.0

I get those 4 errors as well. what can I do to fix it. 

0 Karma

fattylewis
Engager

Grab version 2.2.1 and copy the lookups directory from it and put it into 2.2.0 apps/TA-pfsense directory.

nervatan
Observer

I'm having the same problem with version 2.5.0 

0 Karma

o0chris0o
New Member

Did you figure out what was wrong?  I have the same problem with 2.5.0 and Splunk 8.2.0. I use universal forwarder on my pfsense to get the data in Splunk.

0 Karma

fattylewis
Engager

Download version 2.2.1 from splunkbase and grab the lookups directory from it and put it in the apps/TA-pfsense directory.

Worked for me just now.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...