Splunk Enterprise

CSV file skipped in Splunk dashboard causing data discrepancy issue

sonamchaudhary
New Member

I'm experiencing a data discrepancy issue in my Splunk dashboard where a CSV file seems to be getting skipped. 
I receive the following error message: "Error in 'SearchParser': The search specifies a macro 'lookup_requirement_items' that cannot be found. Reasons include: the macro name is misspelled, you do not have..."
I suspect that the skipped CSV file might be related to this data discrepancy issue. Has anyone encountered a similar problem or have any suggestions on how to troubleshoot this 
Any help or insights would be greatly appreciated. Thank you!

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Have you verified the "lookup_requirement_items" macro exists and that you have access to it?

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

CX Day is Coming!

Customer Experience (CX) Day is on October 7th!! We're so excited to bring back another day full of wonderful ...

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...