Skip to content

generate_user_access_lookup is scheduled, but no lookup named last_access_by_user exists. #53

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
larrys opened this issue Jul 28, 2022 · 0 comments
Open

generate_user_access_lookup is scheduled, but no lookup named last_access_by_user exists. #53

larrys opened this issue Jul 28, 2022 · 0 comments
Labels
bug Something isn't working

Comments

@larrys
Copy link
Contributor

larrys commented Jul 28, 2022

Describe the bug
This tripped an alert of mine that looks for errors with SavedSplunker in the internal logs

07-28-2022 06:01:04.168 +0000 ERROR SavedSplunker - savedsearch_id="nobody;github_app_for_splunk;generate_user_access_lookup", message="Error in 'outputlookup' command: The lookup table 'last_access_by_user' is invalid.". No actions executed

To Reproduce
Install app, and wait 24 hours for scheduled search to get triggered, and look in internal logs for failures.

Expected behavior
The app should ship with a transforms.conf entry with the lookup to generate it.
@larrys larrys added the bug Something isn't working label Jul 28, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@larrys