All Apps and Add-ons

KV Store issues on 6.4.1

pdgill314
Path Finder

Greetings.
I was attempting to install the Splunk_TA_openldap addon, and after installation I am getting the following error:

The lookup table 'openldap_src_lookup' does not exist. It is referenced by configuration 'openldap:access'.

Does anyone have any suggestions on how to correct this?

Thank you.

Splunk Version - 6.4.1

Edit:

Here is what I have in Lookup definitions:

openldap_src_lookup kvstore _key, conn, src No owner Splunk_TA_openldap Global | Permissions Enabled | Disable Clone

openldap_user_lookup kvstore _key, conn, op, user No owner Splunk_TA_openldap Global | Permissions Enabled | Disable Clone

0 Karma
1 Solution

pdgill314
Path Finder
0 Karma

pdgill314
Path Finder

I figured out what it was. Server Certificate had expired.

Followed this post:

https://answers.splunk.com/answers/397029/kv-store-lookup-failing-with-error-about-kv-store.html

0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...