Using DB Lookup with Splunk DB Connect 2 and I've got all the data showing up in the preview window perfectly. We are using automatic lookup.
However, when we run a search against the matching source, I cannot see the new fields I would expect.
Anything simple I'm missing?
↧
