Yes, that resolved the issue! We were running 5.0.0, but reverted back to 4.8.4 and there are no longer any lookup table errors. Thank you! ... View more

We recently began experiencing this same issue after we upgraded Splunk from 6.4.1 to 7.1 for security reasons, but our apps for Windows AD and Exchange were incompatible so we installed all dependencies and upgraded the AD app (haven't made it to upgrading Exchange app yet). Then we began receiving the same error messages in splunkd.log when running any search. I've had a hard time finding anyone else with this issue, aside from this question. What version of Splunk are you running, LeandroKopke? ... View more