After installing the Tenable PVSI app (#1844 on Splunkbase) on the search heads in our search head cluster, we get the following error from all 8 of the indexers in our indexer cluster:
'Could not find all of the specified destination fields in the lookup table.' for conf 'pvs' and lookup table 'protocol_lookup'
Should this app be installed on the indexers or search heads or both? I didn't see an answer to this in the documentation (https://splunkbase.splunk.com/app/1844/#/documentation ).
↧