Running Splunk 6.3.1 and Palo Alto app 5.0. receiving the error below when doing a simple search. index=pan_logs
SplunkforPaloAltoNetworks v 5.0 is deployed to search head.
Splunk_TA_paloalto v 3.5 is deployed to search head, indexers, and HF's
The limit has been reached for log messages in info.csv. 3 messages have not been written to info.csv. Please refer to search.log for these messages or limits.conf to configure this limit.
[idx1.servername] Error 'Could not find all of the specified destination fields in the lookup table.' for conf 'pan:config' and lookup table 'pan_vendor_info_lookup'.
[idx1.servername] Error 'Could not find all of the specified destination fields in the lookup table.' for conf 'pan:newapps' and lookup table 'pan_vendor_info_lookup'.
[idx1.servername] Error 'Could not find all of the specified destination fields in the lookup table.' for conf 'pan:system' and lookup table 'pan_vendor_info_lookup'.
[idx1.servername] Error 'Could not find all of the specified destination fields in the lookup table.' for conf 'pan:threat' and lookup table 'pan_vendor_info_lookup'.
[idx1.servername] Error 'Could not find all of the specified destination fields in the lookup table.' for conf 'pan:traffic' and lookup table 'pan_vendor_info_lookup'.
[idx1.servername] Error 'Could not find all of the specified destination fields in the lookup table.' for conf 'pan:wildfire_report' and lookup table 'pan_vendor_info_lookup'.
[idx1.servername] Error 'Could not find all of the specified destination fields in the lookup table.' for conf 'source::tcp:6000|host::192.168.0.0|pan:threat' and lookup table 'pan_vendor_info_lookup'.
[idx1.servername] Error 'Could not find all of the specified destination fields in the lookup table.' for conf 'source::tcp:6000|host::192.168.0.0|pan:traffic' and lookup table 'pan_vendor_info_lookup'.
[idx1.servername] Error 'Could not find all of the specified destination fields in the lookup table.' for conf 'source::tcp:6000|host::192.168.0.0|pan:system' and lookup table 'pan_vendor_info_lookup'.
[idx1.servername] Error 'Could not find all of the specified destination fields in the lookup table.' for conf 'source::tcp:6000|host::192.168.0.0|pan:threat' and lookup table 'pan_vendor_info_lookup'.
[idx1.servername] Error 'Could not find all of the specified destination fields in the lookup table.' for conf 'source::tcp:6000|host::192.168.0.0|pan:traffic' and lookup table 'pan_vendor_info_lookup'.
↧