The best way I found is to go to the /etc/apps directory and run:
grep -r "lookup-file-causing-error" *
This will find all instances. You can then disable or uninstall whichever app is associated to confirm the error messages go away. That at least allows you to focus on which lookup is broken.
In my case, it was due to uninstalling the TA_SalesForce, but the Splunk App for Salesforce was still installed.
... View more