Splunk Enterprise

Lookup Editor giving ERROR " The requested lookup file does not exist."

Ashwini008
Builder

Hi,

My Lookup Editor is 2.0.3 version and splunk is 7.3.3.

When i am trying to open my lookup file within an any existing app i am getting the below error

" The requested lookup file does not exist." I upgraded lookup editor version to 2.6.0 still gettig this error.

But i am able to open this lookup while through lookup editor app i am able to see my lookup.

Any suggestion on how to fix this?

Thanks!

Tags (3)
0 Karma

thambisetty
SplunkTrust
SplunkTrust

Did you try :
| inputlookup <yourlookupname>

————————————
If this helps, give a like below.
0 Karma

Ashwini008
Builder

@thambisetty Yes data and lookup both are present.The same lookup opens in Lookup Editor App,but throws the error when trying to open the lookup within the same app other than lookup editor

0 Karma

thambisetty
SplunkTrust
SplunkTrust

How did you open lookup in app context ? 

who is the owner of lookup?

has the lookup been migrated from old search head to new search head ?

you should change the permissions in lookups knowledge object found in settings. If there is definition for the lookup you should change permission in lookup definition also.

 

————————————
If this helps, give a like below.
0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Customer Survey!

If you use Splunk Observability Cloud, we invite you to share your valuable insights with us through a brief ...

Happy CX Day, Splunk Community!

Happy CX Day, Splunk Community! CX stands for Customer Experience, and today, October 3rd, is CX Day — a ...

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...