Splunk Enterprise

How do I find a list (via SPL) of damaged Lookups or the ones that are broken? Thank u in advance.

SamHTexas
Builder

I also need to see who may have created the lookup. After finding the "broken Lookups list" was planning to fix them. Thank u a million

Labels (1)
Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

How do you define broken in this context?

0 Karma

SamHTexas
Builder

@ITWhisperer wrote:

How do you define broken in this context?


The ones that error out & don't work.

Tags (1)
0 Karma

SamHTexas
Builder

Thank u champ for your message. I have newly started seeing "could not load lookup=LOOKUP_auto_admin_looup" errors. The error reads: splunk_indx.aws........could not load lookup xxxx. 

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...