Hi @MAMAOUI, These errors are because of missing lookups that comes with Palo Alto Networks Add-on app.  You can fix by commenting LOOKUP-minemeldfeeds_src_lookup lines inside props.conf in Palo Alto Networks Add-on. There should be 4 lines.   ... View more

ok I will try .thank you ... View more

For clarification, I understand the exit code 114 is normal, but can these be suppressed from displaying in Messages? Is there an update planned to remove from showing in Messages? Thank you- Duane ... View more

Hello , Thank you, It works now,I added the \ before the |. Meryem ... View more

HI MAMAOUI, if you have a Search Head Cluster, you have to deploy apps using deployer https://docs.splunk.com/Documentation/Splunk/7.0.0/DistSearch/PropagateSHCconfigurationchanges in few words, you have to copy your apps to deploy in Deployer's $SPLUNK_HOME/etc/shcluster/ and then Push the configuration bundle running the command ./splunk apply shcluster-bundle -target <URI>:<management_port> -auth <username>:<password> if you want to preserve lookups of the other apps you have to use splunk apply shcluster-bundle -target <URI>:<management_port> -preserve-lookups true -auth <username>:<password> Bye. Giuseppe ... View more