- Apps and Add-ons
- :
- All Apps and Add-ons
- :
- Re: 4.3 upgrade issues
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The lookup table 'wmi_version_range_lookup' does not exist. It is referenced by configuration 'WMI:Version'
The lookup table 'windows_vendor_info_lookup' does not exist. It is referenced by configuration 'source::*:System'
Any ideas what this means
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
here is the short answer
Splunk> Manager » Apps » windows » Permissions
select "all apps" at the lower left corner of the GUI
MODERATOR EDIT: this issue is fixed in version 4.5.1 of the app, available now on Splunkbase.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Are you seeing this right after you upgrade? Where (in what context) are you seeing this?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Worked like a charm, thanks!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
here is the short answer
Splunk> Manager » Apps » windows » Permissions
select "all apps" at the lower left corner of the GUI
MODERATOR EDIT: this issue is fixed in version 4.5.1 of the app, available now on Splunkbase.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Here is the long answer from support
it seems that the default.meta for the Windows app includes an entry for [props] being exported system wide. In other words the props configurations which refer to the lookup tables are made Global, thus reference-able by all apps, however the lookups are not.
The solution would be to either
make the Windows app Global under App permissions OR make all the lookup table files Global under Manager/Lookups OR edit local.meta under etc/apps/windows/metadata and enter:
[props]
export = none
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
here is the short answer
Splunk> Manager » Apps » windows » Permissions
select "all apps" at the lower left corner of the GUI
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'm seeing this too. Hoping for some guidance to resolve.
More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk
.conf24 | Personalize your .conf experience with Learning Paths!
Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...
