Thank you for your reply.
I investigated to line 39 , column 62 in following file.
/opt/splunk/etc/apps/Splunk_for_Sharepoint/default/data/ui/views/usage_sites.xml
36 | inputlookup SPSite
37 | table Id,Url
38 | rename Id as SiteId
39 | join type=outer [ search eventtype=mssharepoint-audit Event<14 | stats count by SiteId ]
40 | where isnull(count)
41 | table SiteId,Url
Actually, I could not find a "SPSite" csv file in SharePoint Apps directory.
I guess does not define "SPSite" look up table in SharePonit Apss.
How can I fix this problem?
Thanks,
Kenz
... View more