The lookup table does not exist for new user.

[sanjay_shrestha]

Hi,

I created dblookup and used in a saved search as admin, which is working fine. However when I run same saved search as different user, I get following message:

The lookup table 'abc_Lookup' does not exist. It is referenced by configuration 'host::XYZ'.

Thanks,
Sanjay

[sanjay_shrestha · Accepted solution]

Finally, I was able to search utilizing lookups created by Admin. Following modifications were done in ..../splunk/etc/apps/dbx/metadata/default.meta file.

[]
access = read : [ * ], write : [ admin ] -->> read [ admin] was changed to read [ * ]


### Manager ###
[manager/dblookups]
access = read : [ *  ], write : [ admin ]  -->> read [ admin] was changed to read [ * ]
export = system

[yannK]

you should put in local.meta to make it persistent with app upgrades

[lukejadamec]

You need to check the permissions on your lookup.

Manager > Lookups > Automatic Lookups.

Select All Apps (or the App that contains the lookup), select Permissions for that Lookup, and grant permissions to that user.

[lukejadamec]

I'm glad you agree. You're welcome.

[sanjay_shrestha]

I think you are right. I do not see database lookups when logged in as new user.

[lukejadamec]

I'm not familiar with database lookups, but it has to be a permission problem somewhere. That is the only way one person can use it and one cannot. Have you checked the permissions on the database lookup? Can the other user see the database lookup in Manager?

[sanjay_shrestha]

I only created Database lookups and Automatic lookups, did not create any lookup file manually.

Manager>Lookups>Lookup table files > does not have any configuration items. It is empty.

Thanks,
Sanjay

[lukejadamec]

I was able to recreate your problem by restricting access to the lookup table files.
Make sure Manager>Lookups>Lookup table files > your lookupfile has the correct permissions.

[sanjay_shrestha]

I have already set those to All apps and granted permission to new user (both read and write). It was not working.

Thanks,
Sanjay