I have a lookup table file that changes periodically. Replacing the lookup table this time around resulted in multiple errors. I have tried a few things to get around the error, including deleting the lookup table file, definition and automatic lookup. In the process of creating the new lookup table file, definition and lookup, encountered multiple errors as described below.
Lookup table file has been uploaded, with global permissions. When creating the lookup definitions, got this error message: "Encountered the following error while trying to save: An object with name=[myfile] already exists". To get around the error, added '06' in front of the file name which worked. Ensured permissions are global. When creating the automatic lookups, got this error message: "Your entry was not saved. The following error was reported: SyntaxError: Unexpected token '<', "<p class=""... is not valid JSON." Canceled out and was able to go back in and create an automatic lookup. Ensured permissions are global. Unfortunately, the lookup is not working in my searches so I suspect there are still latent issues with Splunk reconciling the lookup.
With all of these errors, do I need to clear out some config file to get the lookup table working again? If so, how do I do that?
