Hi There, As we are planning for the Bangalore Splunk Usergroup meeting around next month, if u r ready to speak(just 15 mins talk is enough, zoom call, video presence not needed, just an audio call 😞 ---> Splunk Admin troubleshooting tips and tricks ---> Splunk design and implementation tasks and details ---> presales guys in any domain(the talk is just an intro meeting.. so you need not be a Splunk guy, if u r into Sales, Presales, Client engagement lead, pls reach out) ---> Splunk interview experiences(success and failure stories to keep us motivated), job market, etc.. ---> Splunk ES / ITSI / SOAR basics, tips and tricks.   https://usergroups.splunk.com/bengaluru-splunk-user-group/   ... View more

Dear Splunk Dev team,  One more simple typo issue:  Splunk fresh install 9.4.0 (last week's version 9.3.2 also had this issue, but i thought to wait to post this till next version) showing the warning msg - "Error in 'lookup' command: Could not construct lookup 'test_lenlookup, data'. See search.log for more details." (on older splunk versions i remember this search.log, but nowadays both search.log and searches.log are not available)   https://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/WhatSplunklogsaboutitself as per what Splunk logs about itself, it should be "See searches.log for more details." one more bigger issue -both search.log or searches.log are not available. All these searches are not returning anything (the doc says that - The Splunk search logs are located in sub-folders under $SPLUNK_HOME/var/run/splunk/dispatch/. )       index=_* source="*search.log" OR index=_* source="*searches.log" OR index=_* source="C:\Program Files\Splunk\var\run\splunk\dispatch*"         will post this to Splunk Slack as well, thanks.  If any post helped you in anyway, pls consider adding a karma point, thanks.  ... View more