All Apps and Add-ons

KV Store issues on 6.4.1

pdgill314
Path Finder

Greetings.
I was attempting to install the Splunk_TA_openldap addon, and after installation I am getting the following error:

The lookup table 'openldap_src_lookup' does not exist. It is referenced by configuration 'openldap:access'.

Does anyone have any suggestions on how to correct this?

Thank you.

Splunk Version - 6.4.1

Edit:

Here is what I have in Lookup definitions:

openldap_src_lookup kvstore _key, conn, src No owner Splunk_TA_openldap Global | Permissions Enabled | Disable Clone

openldap_user_lookup kvstore _key, conn, op, user No owner Splunk_TA_openldap Global | Permissions Enabled | Disable Clone

0 Karma
1 Solution

pdgill314
Path Finder
0 Karma

pdgill314
Path Finder

I figured out what it was. Server Certificate had expired.

Followed this post:

https://answers.splunk.com/answers/397029/kv-store-lookup-failing-with-error-about-kv-store.html

0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...