All Apps and Add-ons

Why am I getting the error 'Could not find all of the specified destination fields in the lookup table.' for conf 'splunkd' in Chargeback Analysis for Splunk on all clustered peer indexers?

uvmk61
New Member

We are getting the following error on all clustered peer indexers after installing the Chargeback App.
I have run the back-fill searches on all search heads as the App installation instructions suggested. Still getting the error.

Error 'Could not find all of the specified destination fields in the lookup table.' for conf 'splunkd' and lookup table 'customers'.

Can someone suggest a resolution to this?
Thanks

0 Karma

rmorlen_splunk
Splunk Employee
Splunk Employee

Change the lookups (all 3 places) from global to App.

0 Karma

uvmk61
New Member

Thank you!
Now the error still shows within the Chargeback App.
The error has disappeared from Search and Reporting App though.

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...