Optiv Threat Intel: "Error in 'dnslookup' command: Cannot find program 'dnslookup' or script 'dnslookup'."

[john_glasscock]

I have downloaded and installed OPTIV on my search head. It is installed in /opt/splunk/etc/apps. When the dashboards populate, the ones that reference dnslookups shows the following error:

Error in 'dnslookup' command: Cannot find program 'dnslookup' or script 'dnslookup'.

[derekarnold]

John,
Please check for the existence of these files in the default directory

transforms.conf:

[dnsLookup]
## this stanza name will be called by your entry in props.conf and IS case sensitive
external_cmd = external_lookup.py host ip
fields_list = host, ip

commands.conf:

[dnslookup]
filename=dnslookup.py
run_in_preview = true

in the /bin folder there needs to be a dnslookup.py