Installation

ERROR lookup minemeldfeeds

MAMAOUI
Explorer

Hello All,

I have Two  errors on the search cluster for ANY search in Splunk. Two errors per indexer:

ERROR - Could not load lookup=LOOKUP-minemeldfeeds_dest_lookup 

ERROR - Could not load lookup=LOOKUP-minemeldfeeds_src_lookup

Can anyone give me in the right direction for a solution to this errors? 

Thanks

Labels (1)
Tags (1)
0 Karma

scelikok
SplunkTrust
SplunkTrust

Hi @MAMAOUI,

These errors are because of missing lookups that comes with Palo Alto Networks Add-on app. 

You can fix by commenting LOOKUP-minemeldfeeds_src_lookup lines inside props.conf in Palo Alto Networks Add-on. There should be 4 lines.

 

If this reply helps you an upvote is appreciated.