Splunk Search

Lookup table 'userlistbyclientip.csv' is empty.

pde7
Explorer

Does anyone know how webintelligence is generating this .csv? I would like to debug why I'm seeing the empty error but I don't know where to start.

1 Solution

araitz
Splunk Employee
Splunk Employee

The 'New Visitors Lookup' saved search generates this lookup. It runs every day at 1 AM over the past day and attempts to tie specific users to their first visit to the website.

View solution in original post

araitz
Splunk Employee
Splunk Employee

The 'New Visitors Lookup' saved search generates this lookup. It runs every day at 1 AM over the past day and attempts to tie specific users to their first visit to the website.

Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...