Dashboards & Visualizations

Why am I getting dashboard error "The lookup table 'GroupType' does not exist. It is referenced by configuration 'WinEventLog:Security'"?

andrefriedmann
New Member

Hi

I have a saved dashboard for a certain user, they get this error icon:

[SERVER_NAME] The lookup table 'GroupType' does not exist. It is referenced by configuration 'WinEventLog:Security'.

However, data still seems to be coming through for most of the panels. Also when logged in as admin, and look at the same dashboard, I don't see these errors at all? Which makes me think it's a permissions thing. I have been through Lookup table files, Lookup definitions, Automatic lookups and anything which mentions GroupType I have made sure the users group has at least read access.

any ideas?

Thanks

0 Karma

ChrisBell04
Communicator

you ever get this figured out? Just ran into the same thing today with a limited user account.

edit:
nevermind, figured mine out. A legacy custom app WAS referencing a GroupType lookup file in transforms that no longer existed. Removed, restarted, and fixed!

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...