lookup not working. Help pls

gitingua · ‎10-21-2021

Now working lookup

On a local server on my computer, I got the result

But when I did exactly the same actions on the production server. one to one. Then there is no result

examples in the photo, one user at a time. no result for everyone.
where could i go wrong? Thanks!

Splunk Version 7.

both files have global mode

efavreau · ‎10-21-2021

Check lookup definition in both places, csv in both places, permissions on both - in both places. Then run the exact same query in both places.

###

If this reply helps you, an upvote would be appreciated.

richgalloway · ‎10-21-2021

The screenshots do not show the lookup file containing an address or CIDR range that matches 10.10.10.10. Is there such an entry?

---
If this reply helps you, Karma would be appreciated.

Are you a member of the Splunk Community?