All Apps and Add-ons
Highlighted

lookup error in splunk threathunting app

Explorer

Error in 'lookup' command: Could not construct lookup 'dnswhitelist, mitretechniqueid, hostfqdn, processpath, queryname, output, reason'. See search.log for more details.

I get this error in threat hunting app , and when I fill lookup fields the problem still stays, whats the solution.

Highlighted

Re: lookup error in splunk threathunting app

SplunkTrust
SplunkTrust

What are you doing when this error occurs?
What details do you find in search.log?

---
If this reply helps you, an upvote would be appreciated.
0 Karma