Splunk Search

[idx-1,idx-2,sh-2] Could not load lookup=LOOKUP-threatprotect-severity

SplunkNinja
Path Finder

I am seeing the following alert on the Searching and Reporting App and also within the InfoSec App for Splunk.

[idx-1,idx-2,sh-2] Could not load lookup=LOOKUP-threatprotect-severity

I am not sure how to go about troubleshooting this further.  Thx.

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @SplunkNinja ,

search in the lookups and in the lookup definitions the automatic lookup named "threatprotect-severity", probably it's missed or there are some missed fields, called by your searches, in the lookup definition.

Ciao.

Giuseppe

View solution in original post

SplunkNinja
Path Finder

I narrowed the issue down to an add-on and then updated to the latest version.  This fixed the problem.  Thanks for you help @gcusello and @PickleRick 

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @SplunkNinja ,

good for you, see next time!

let us know if we can help you more, or, please, accept one answer for the other people of Community.

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated by all the contributors 😉

gcusello
SplunkTrust
SplunkTrust

Hi @SplunkNinja ,

search in the lookups and in the lookup definitions the automatic lookup named "threatprotect-severity", probably it's missed or there are some missed fields, called by your searches, in the lookup definition.

Ciao.

Giuseppe

PickleRick
SplunkTrust
SplunkTrust

And check permissions. The lookup itself might be OK but you might not have permissions to use it.

Get Updates on the Splunk Community!

Unlock New Opportunities with Splunk Education: Explore Our Latest Courses!

At Splunk Education, we’re dedicated to providing top-tier learning experiences that cater to every skill ...

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...