Installation

ERROR lookup minemeldfeeds

MAMAOUI
Explorer

Hello All,

I have Two  errors on the search cluster for ANY search in Splunk. Two errors per indexer:

ERROR - Could not load lookup=LOOKUP-minemeldfeeds_dest_lookup 

ERROR - Could not load lookup=LOOKUP-minemeldfeeds_src_lookup

Can anyone give me in the right direction for a solution to this errors? 

Thanks

Labels (1)
Tags (1)
0 Karma

scelikok
SplunkTrust
SplunkTrust

Hi @MAMAOUI,

These errors are because of missing lookups that comes with Palo Alto Networks Add-on app. 

You can fix by commenting LOOKUP-minemeldfeeds_src_lookup lines inside props.conf in Palo Alto Networks Add-on. There should be 4 lines.

 

If this reply helps you an upvote and "Accept as Solution" is appreciated.
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...