- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
mzax

Splunk Employee
10-29-2014
01:09 PM
When we try to change the status and update a notable event from the Incident Review dashboard we are prompted with a banner stating
"The incident review lookup file is currently being edited, please wait a bit and re-submit your changes"
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
mzax

Splunk Employee
10-29-2014
01:21 PM
You are probably using NFS for the storage.
NFS needs to be configured with supports for file locks. Without file-locking support, this error will occur.
As well as ensure that the nfslockd process is up and running.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
mzax

Splunk Employee
10-29-2014
01:21 PM
You are probably using NFS for the storage.
NFS needs to be configured with supports for file locks. Without file-locking support, this error will occur.
As well as ensure that the nfslockd process is up and running.
