Splunk Search

Lookup table 'userlistbyclientip.csv' is empty.

pde7
Explorer

Does anyone know how webintelligence is generating this .csv? I would like to debug why I'm seeing the empty error but I don't know where to start.

1 Solution

araitz
Splunk Employee
Splunk Employee

The 'New Visitors Lookup' saved search generates this lookup. It runs every day at 1 AM over the past day and attempts to tie specific users to their first visit to the website.

View solution in original post

araitz
Splunk Employee
Splunk Employee

The 'New Visitors Lookup' saved search generates this lookup. It runs every day at 1 AM over the past day and attempts to tie specific users to their first visit to the website.

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...