I configured external lookup definition with a script I built. However, the lookup command fails with the following message.
Error in 'lookup' command: The lookup table 'mylookup' does not exist or is not available.
SPL Command:
... | lookup mylookup myfield
$SPLUNK_HOME/etc/apps/myapp/local/transforms.conf:
[mylookup]
external_cmd = get_lookup.py
fields_list =Title,Genre,Country,imdbRating
I placed get_lookup.py in $SPLUNK_HOME/etc/apps/myapp/bin/.
What's wrong with the lookup definition?
(Splunk Ver: 6.5 / OS: Mac OS X)
... View more