Why am I getting lookup error after configuring Cloud Trail using Splunk App for AWS?

[mohit_jain01]

Hi,

I've been trying to configure Cloud Trail using Splunk App for AWS. Even after completing all steps listed in the USAGE guide, data is not getting populated. I am getting error as "error in lookup account,the lookup table subaccount.csv does not exist"

Please help me in configuring the app.

[_d_]

Most likely the problem lies with the input scripts (get*.py) in app's bin directory that generate those lookup tables. The scripts either have not fired, perhaps due to being disabled, or are otherwise failing to populate lookups because of other errors. I would check the logs for more information.