All Apps and Add-ons

iseries AS400 app jrn_detail_lookup' does not exist

chadfermanxto
Explorer

We are getting an error message on every search for jrn_detail_lookup' does not exist.

Exact error:

[indexername] The lookup table
'jrn_detail_lookup' does not exist. It
is referenced by configuration
'dspjrn:5

I have looked through other posts and tried adding:

[lookups]
export = system

This did not help. I also tried removing the statement in local/props.conf to not reference jrn_detail_lookup.

I just noticed that the iseries/lookups/journal_details.csv does not have a reference to jrn_detail_lookup at the top. Anyone ever had this error or done anything to fix it?

Tags (3)
0 Karma

chadfermanxto
Explorer

We ended up re-downloading the app and this fixed the issue. Looks like we may have had an older version

0 Karma

chadfermanxto
Explorer

Tried adding jrn_detail_lookup to the top of the csv, but we are still getting red bar alerts every time we do a search, and sadly we need this app for audit.

0 Karma

chadfermanxto
Explorer

Tried adding jrn_detail_lookup to the top of the csv, but we are still getting red bar alerts every time we do a search, and sadly we need this app for audit.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...