All Apps and Add-ons

iSeries/as400 app lookup table error after upgrading to 5.0.2

mraimo
Explorer

We upgraded Splunk yesterday from 4.2.3 to 5.0.2 and have consistently received the error "[server name] The lookup table 'jrn _ detail _ lookup' does not exist. It is referenced by configuration 'dspjrn:5'.

The error appears within any apps that I go into (i.e. Cisco, Windows, iSeries). I have tried to upgrade the iSeries app, but the error still appears. Any suggestions? Thanks!

*Update...we recently upgraded to 5.0.2.2 after having other issues with the system. The error still appears even though I can see the lookup table in the app config.

0 Karma
1 Solution

JSapienza
Contributor

To fix this issue, edit $SPLUNK_HOME/etc/apps/iseries/metadata/local.meta

and, edit following:

[lookups] 

export = system 

This worked for me.

View solution in original post

JSapienza
Contributor

To fix this issue, edit $SPLUNK_HOME/etc/apps/iseries/metadata/local.meta

and, edit following:

[lookups] 

export = system 

This worked for me.

mraimo
Explorer

Thank you! It appears to be working for me as well.

0 Karma

dondky
Path Finder

BTW this is an iseries lookup issue. I don't think the dspjrn lookup is in cisco or anything else. I think this question would be better off if it was titled iseries lookup or as400 app related.

0 Karma

dondky
Path Finder

Me three, haven't found a solution to this as well. Perhaps the author can chime in.

0 Karma

mraimo
Explorer

We still have not found an answer to this solution. I have tried other fixes from the 4.1 upgrade however it did not fix the issue. If I find a solution that works I will make sure to post it in here since it seems to be a problem with multiple users.

0 Karma

afaraino
Explorer

Got the same error since upgraded to 5.0.2.
Still looking...

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...