Hello community fellows, I'm experiencing the following errors in splunkd from each of the shc members. INFO AuthenticationManagerLDAP - Could not find user="system" with strategy="LDAP" INFO AuthenticationManagerLDAP - Could not find user="system" with strategy="LDAP" have checked using the following. no luck finding what is referencing system user. find /opt/splunk/ -name *.meta -exec grep "owner = system" {} \; -print find /opt/splunk -type f -exec grep -H 'owner = system' {} \; find /opt/splunk -type f -exec grep -H 'user = system' {} \; tried adding a local user, no further errors occur. can anyone suggest what may be referencing system user? ... View more

So what I'm trying trying to achieve is searching a field for contained in a CSV file, not an exact match. I can do this with single word using | eval catch=if(match(field123,"contain-word"),"matches","other") | search catch=matches but wondering if there's some way of using inputlookups or if anyone can recommend another way to search a field containing with a input file. This is what I have tried. | eval catch=if(match(field123,"[| inputlookup input-file]"),"matches","other") | search catch=matches ... View more