Splunk Enterprise

How do I find a list (via SPL) of damaged Lookups or the ones that are broken? Thank u in advance.

SamHTexas
Builder

I also need to see who may have created the lookup. After finding the "broken Lookups list" was planning to fix them. Thank u a million

Labels (1)
Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

How do you define broken in this context?

0 Karma

SamHTexas
Builder

@ITWhisperer wrote:

How do you define broken in this context?


The ones that error out & don't work.

Tags (1)
0 Karma

SamHTexas
Builder

Thank u champ for your message. I have newly started seeing "could not load lookup=LOOKUP_auto_admin_looup" errors. The error reads: splunk_indx.aws........could not load lookup xxxx. 

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Buttercup Games: Further Dashboarding Techniques

Hello! We are excited to kick off a new series of blogs from SplunkTrust member ITWhisperer, who demonstrates ...

Message Parsing in SOCK

Introduction This blog post is part of an ongoing series on SOCK enablement. In this blog post, I will write ...

Exploring the OpenTelemetry Collector’s Kubernetes annotation-based discovery

We’ve already explored a few topics around observability in a Kubernetes environment -- Common Failures in a ...