- Splunk Answers
- :
- Using Splunk
- :
- Splunk Search
- :
- The lookup table does not exist for new user.
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
I created dblookup and used in a saved search as admin, which is working fine. However when I run same saved search as different user, I get following message:
The lookup table 'abc_Lookup' does not exist. It is referenced by configuration 'host::XYZ'.
Thanks,
Sanjay
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Finally, I was able to search utilizing lookups created by Admin. Following modifications were done in ..../splunk/etc/apps/dbx/metadata/default.meta file.
[]
access = read : [ * ], write : [ admin ] -->> read [ admin] was changed to read [ * ]
### Manager ###
[manager/dblookups]
access = read : [ * ], write : [ admin ] -->> read [ admin] was changed to read [ * ]
export = system
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Finally, I was able to search utilizing lookups created by Admin. Following modifications were done in ..../splunk/etc/apps/dbx/metadata/default.meta file.
[]
access = read : [ * ], write : [ admin ] -->> read [ admin] was changed to read [ * ]
### Manager ###
[manager/dblookups]
access = read : [ * ], write : [ admin ] -->> read [ admin] was changed to read [ * ]
export = system
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
you should put in local.meta to make it persistent with app upgrades
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You need to check the permissions on your lookup.
Manager > Lookups > Automatic Lookups.
Select All Apps (or the App that contains the lookup), select Permissions for that Lookup, and grant permissions to that user.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'm glad you agree. You're welcome.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I think you are right. I do not see database lookups when logged in as new user.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'm not familiar with database lookups, but it has to be a permission problem somewhere. That is the only way one person can use it and one cannot. Have you checked the permissions on the database lookup? Can the other user see the database lookup in Manager?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I only created Database lookups and Automatic lookups, did not create any lookup file manually.
Manager>Lookups>Lookup table files > does not have any configuration items. It is empty.
Thanks,
Sanjay
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I was able to recreate your problem by restricting access to the lookup table files.
Make sure Manager>Lookups>Lookup table files > your lookupfile has the correct permissions.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have already set those to All apps and granted permission to new user (both read and write). It was not working.
Thanks,
Sanjay
Announcing Scheduled Export GA for Dashboard Studio
Extending Observability Content to Splunk Cloud
More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!
