Splunk Enterprise

Cannot expand lookup field 'triggertype' due to a reference cycle in the lookup configuration.


Hi Team,

After the upgradation to splunk version, we have started seeing "warn" in the one specific dashboard with warning as "cannot expand lookup field 'triggertype' due to a reference cycle in the lookup configuration.check search.log for details and update configuration to remove th reference cycle".

I have seen others splunk community answers for field userid.

But i would like to know the exact resolution for this triggertype field.


Labels (2)
0 Karma

Splunk Employee
Splunk Employee

Did you resolve the issue? If it is please post the answer here. It will help others.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...