All Apps and Add-ons

iseries AS400 app jrn_detail_lookup' does not exist

chadfermanxto
Explorer

We are getting an error message on every search for jrn_detail_lookup' does not exist.

Exact error:

[indexername] The lookup table
'jrn_detail_lookup' does not exist. It
is referenced by configuration
'dspjrn:5

I have looked through other posts and tried adding:

[lookups]
export = system

This did not help. I also tried removing the statement in local/props.conf to not reference jrn_detail_lookup.

I just noticed that the iseries/lookups/journal_details.csv does not have a reference to jrn_detail_lookup at the top. Anyone ever had this error or done anything to fix it?

Tags (3)
0 Karma

chadfermanxto
Explorer

We ended up re-downloading the app and this fixed the issue. Looks like we may have had an older version

0 Karma

chadfermanxto
Explorer

Tried adding jrn_detail_lookup to the top of the csv, but we are still getting red bar alerts every time we do a search, and sadly we need this app for audit.

0 Karma

chadfermanxto
Explorer

Tried adding jrn_detail_lookup to the top of the csv, but we are still getting red bar alerts every time we do a search, and sadly we need this app for audit.

0 Karma
Get Updates on the Splunk Community!

Splunk Security Content for Threat Detection & Response, Q1 Roundup

Join Principal Threat Researcher, Michael Haag, as he walks through:An introduction to the Splunk Threat ...

Splunk Life | Happy Pride Month!

Happy Pride Month, Splunk Community! 🌈 In the United States, as well as many countries around the ...

SplunkTrust | Where Are They Now - Michael Uschmann

The Background Five years ago, Splunk published several videos showcasing members of the SplunkTrust to share ...