...eturns the error: Cannot expand lookup field 'Name' due to a reference cycle in the lookupconfiguration. Check search.log for details and update the lookupconfigurationto remove the reference c...
...p a [status] lookup with the following field definition:
"host","Error_Message","Error_Status","Time_Acknowledged"
The idea is that an administrator then uses a Workflow action to output the f...
I configured external lookup definition with a script I built. However, the lookup command fails with the following message.
Error in 'lookup' command: The lookup table 'mylookup' does not exist o...
...ey / id values disaplay in the output results, we need to show as api_name and brand_name. Also please provide the step by step details for this configuration.
111.111.11.11 - - [18/Jul/2014:07:23:3...
on Splunk Cloud (8.1.2101.1) I'm encountering a warning message in my search results - trying to figure out why this is popping up. Anybody have any idea what this message means and how to resolve i...
...ser1, "Last1, First1"
user2, "Last2, First2"
etc
I have created a file-type lookup definition named activeusers that points to that file.
Under $SPLUNK_HOME/etc/apps/search/local I have the f...
...y policy_id
| eval count=count-1
| sort count
Now, I have added data to the lookup csv, including zone and description information for each policy. This search above shows the "policy_id", t...
Hello,
I’d like toconfigure a wildcard usage for a lookup table, but unfortunately I’m not a Splunk guru and probably need a hand.
I have a lookup called "malware_domain_whitelist" with the U...
Arg this is so frustrating.
I cant find the nix_action_lookup and I can't find the IDS config.
How do i troubleshoot this error.
Is there a btool shortcut to find where this permissions i...
I am running a custom app that uses lookup files to get some of its configuration on a search head cluster.
When the lookup files are edited on a search head, they replicate across to the others w...