Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

The lookup table 'auditd_hosts' is invalid. #15

Open
rohn-niaid opened this issue Aug 30, 2016 · 3 comments
Open

The lookup table 'auditd_hosts' is invalid. #15

rohn-niaid opened this issue Aug 30, 2016 · 3 comments

Comments

@rohn-niaid
Copy link

Installed from within Splunk and then restarted splunk. Connecting to the apps resulted in the error in the issue line. Image attached?
linux_auditd

Splunk Details:
Splunk Version
6.4.3
Splunk Build
b03109c2bad4
@doksu
Copy link
Owner

doksu commented Aug 31, 2016

It sounds like you haven't installed the TA. Please see installation and configuration instructions here: https://github.com/doksu/splunk_auditd/wiki/Installation-and-Configuration

@rohn-niaid
Copy link
Author

Ah, yes. I thought that part was only for a legacy upgrade. My mistake. Thanks!

@rohn-niaid
Copy link
Author

Ok, getting closer. I copied the directory from and to the indicated locations. Checked permissions. Now things, almost come up. Please see the attached image.
linux_auditd2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@rohn-niaid @doksu