Found Error : the indexers could not load lookup

[nareerat_pr]

I've created a search-driven lookup on Splunk ES, then I try to create an automatic lookups with the new lookup file.

I found error messages as follow:

[indexer1] Could not load lookup=LOOKUP-lookup_definitions_name

[indexer2] Could not load lookup=LOOKUP-lookup_definitions_name

[indexer3] Could not load lookup=LOOKUP-lookup_definitions_name

...

How can I resolve this issue?

[richgalloway]

The automatic lookup should reference a lookup definition which invokes your lookup file. Do you have all three pieces in place?

[nareerat_pr]

Yes, I have all three pieces.