We recently updated our Splunk add-on for Windows to 5.0.1, whenever searching we receive the error "Could not load lookup=LOOKUP-app4_for_windows_security" from all of our indexers and search head. We have no local configuration that overrides these lookups, so they are defined as the default from the app. Does anyone have ideas as to what could be causing this error? ... View more

We upgraded our Splunk instance and now we have two buckets stuck in fixup for a non-streaming failure. It shows that it exists on 2 of our 3 indexers, and neither resyncing nor rolling the buckets fixes the problem. When I look in the folder on the indexer that it does not show the bucket existing on, I see a folder for the bucket with rawdata in it. Every minute the time in fixup is resetting. Has anyone encountered this problem before and been able to fix it? ... View more