The query below produces the results expected, but if I remove the "table PSID" section (bolded) it fails, saying 22 errors were generated while executing. PSID is a parsed field, bolded in the event record shown.
"RA_GENERATED" | table PSID | lookup LocationLookup.csv PeopleSoftId AS PSID OUTPUT Brand
Event record:
1/16/20 11:23:09.989 AM strong text16 Jan 2020 11:23:09:989 | WARN | K320LE100005 | 1019178 | XXXR01 | MOSLoggingAspect | - RA_Generated 111 111 111| LangCode en| CountryCode USA
It sounds like the lookup file is not getting distributed to the indexers. One of the 22 error messages should confirm that.
The table
command forces the query to be completed by the search head from that point and the SH is where the lookup file resides.
It sounds like the lookup file is not getting distributed to the indexers. One of the 22 error messages should confirm that.
The table
command forces the query to be completed by the search head from that point and the SH is where the lookup file resides.
I think you're right. Adding a local=true to the lookup seems to work. Thanks!