ERROR lookup minemeldfeeds

[MAMAOUI]

Hello All,

I have Two  errors on the search cluster for ANY search in Splunk. Two errors per indexer:

ERROR - Could not load lookup=LOOKUP-minemeldfeeds_dest_lookup 

ERROR - Could not load lookup=LOOKUP-minemeldfeeds_src_lookup

Can anyone give me in the right direction for a solution to this errors? 

Thanks

[scelikok]

Hi @MAMAOUI,

These errors are because of missing lookups that comes with Palo Alto Networks Add-on app. 

You can fix by commenting LOOKUP-minemeldfeeds_src_lookup lines inside props.conf in Palo Alto Networks Add-on. There should be 4 lines.