I have Two errors on the search cluster for ANY search in Splunk. Two errors per indexer:
ERROR - Could not load lookup=LOOKUP-minemeldfeeds_dest_lookup
ERROR - Could not load lookup=LOOKUP-minemeldfeeds_src_lookup
Can anyone give me in the right direction for a solution to this errors?
These errors are because of missing lookups that comes with Palo Alto Networks Add-on app.
You can fix by commenting LOOKUP-minemeldfeeds_src_lookup lines inside props.conf in Palo Alto Networks Add-on. There should be 4 lines.