Hey
I am receiving the following error when attempting to run my database lookup using DB Connect 2:
[name of my indexer] Script for lookup table 'mylookup' returned error code 1. Results may be incorrect
I am running the following when doing a search
index="index i am searching" | lookup mylookup userOId AS UserOId OUTPUTNEW firstName lastName
The lookup is supposed to correlate json events using the userOid with the firstname and lastname located in a MSSQL database
Any suggestions on where I should look for more information on this error? I don't see anything in the Splunk logs.
↧