All Apps and Add-ons

Why am I getting the error 'Could not find all of the specified destination fields in the lookup table.' for conf 'splunkd' in Chargeback Analysis for Splunk on all clustered peer indexers?

uvmk61
New Member

We are getting the following error on all clustered peer indexers after installing the Chargeback App.
I have run the back-fill searches on all search heads as the App installation instructions suggested. Still getting the error.

Error 'Could not find all of the specified destination fields in the lookup table.' for conf 'splunkd' and lookup table 'customers'.

Can someone suggest a resolution to this?
Thanks

0 Karma

rmorlen_splunk
Splunk Employee
Splunk Employee

Change the lookups (all 3 places) from global to App.

0 Karma

uvmk61
New Member

Thank you!
Now the error still shows within the Chargeback App.
The error has disappeared from Search and Reporting App though.

0 Karma
Get Updates on the Splunk Community!

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...