Splunk Enterprise

Troubleshooting
Use Cases

13
 Soft Mania

App Deployment Issues

Issue-7: Latest entries in lookups
were not detected by queries
Changes not
reflecting

Search Head

app_one

Updating the
lookup

@SoftMania #SoftMania

Deployer
 Soft Mania

App Deployment Issues

Root Cause:
Lookup with the same name present in another
app.

Search Head

app_one app_two

Updating the
lookup data.csv data.csv

@SoftMania #SoftMania
 Soft Mania

App Deployment Issues

Solution:
Remove the extra copy from the other app

Changes are
reflecting

Search Head

app_one app_two

Updating the
lookup data.csv data.csv

@SoftMania #SoftMania