Splunk Search

CsvDataProvider - Unable to find filename property for lookup

kaurinko
Path Finder

Dear Sirs,

I am using lookup to enrich my event data on the fly, and it seems to work fine. However, every invocation of the function lookup produces a warning to the splunkd.log as follows:

06-04-2020 18:39:27.136 +0300 WARN CsvDataProvider - Unable to find filename property for lookup=splunk-installation-info.csv will attempt to use implicit filename.

The search producing the above is

| rest splunk_server=lic /services/licenser/slaves
| lookup splunk-installation-info.csv splunk_uuid AS title OUTPUT BU    

It works, but I am puzzled by the warning. I would like to get rid of it, so how do I tell Splunk the explicit filename?

Best regards,

Petri

Labels (1)
0 Karma

saravanan90
Contributor

I got into the same error...Has there any solution for this issue....

0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!