- Apps & Add-ons
- :
- All Apps and Add-ons
- :
- All Apps and Add-ons
- :
- Why upgrade from Splunk for Palo Alto Networks 4.1...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Single Splunk server- PA app 4.1.1 was working without issue.
Updated to 4.1.3 and now all we get are following errors when we do a basic search for 'pan_traffic'.
Server was restarted - twice, errors still continue.
The lookup table 'app_lookup' does not exist. It is referenced by configuration 'pan_threat'.
The lookup table 'app_lookup' does not exist. It is referenced by configuration 'pan_traffic'.
The lookup table 'app_lookup' does not exist. It is referenced by configuration 'source::udp:514|host::192.168.18.100|pan_traffic'.
The lookup table 'app_lookup' does not exist. It is referenced by configuration 'source::udp:514|host::192.168.99.20|pan_traffic'.
The lookup table 'classification_lookup' does not exist. It is referenced by configuration 'pan_threat'.
The lookup table 'classification_lookup' does not exist. It is referenced by configuration 'pan_traffic'.
The lookup table 'classification_lookup' does not exist. It is referenced by configuration 'source::udp:514|host::192.168.18.100|pan_traffic'.
The lookup table 'classification_lookup' does not exist. It is referenced by configuration 'source::udp:514|host::192.168.99.20|pan_traffic'.
The lookup table 'pan_vendor_info_lookup' does not exist. It is referenced by configuration 'flowintegrator'.
The lookup table 'pan_vendor_info_lookup' does not exist. It is referenced by configuration 'pan_config'.
The lookup table 'pan_vendor_info_lookup' does not exist. It is referenced by configuration 'pan_newapps'.
The lookup table 'pan_vendor_info_lookup' does not exist. It is referenced by configuration 'pan_system'.
The lookup table 'pan_vendor_info_lookup' does not exist. It is referenced by configuration 'pan_threat'.
The lookup table 'pan_vendor_info_lookup' does not exist. It is referenced by configuration 'pan_traffic'.
The lookup table 'pan_vendor_info_lookup' does not exist. It is referenced by configuration 'pan_wildfire_report'.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Update:
Initially, I had updated from the Web UI, checking the update box (which is when the issue started).
I uninstalled the app (deleted the folder), then manually copy it from the tar ball, restarted and it started working.
When in doubt, use the old fashioned ways...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Update:
Initially, I had updated from the Web UI, checking the update box (which is when the issue started).
I uninstalled the app (deleted the folder), then manually copy it from the tar ball, restarted and it started working.
When in doubt, use the old fashioned ways...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There was probably something stuck in the 'local' folder for your app instance that was causing a problem. Glad it's fixed!
Enterprise Security Content Update (ESCU) | New Releases
Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?
Index This | What are the 12 Days of Splunk-mas?
