In Splunk ES and the platform, this error keeps appearing and I couldn't resolve it.
Could not load lookup=LOOKUP-useragentstrings
Hi @kareem
Please search in the lookups and in the lookup definitions the automatic lookup named "useragentstrings", probably it's missed or there are some missed fields.
Could you pls copy paste the whole SPL query (remove hostnames, important details, etc)