mbegan / Okta-Identity-Cloud-for-Splunk

Public REPO for splunkbase app
https://splunkbase.splunk.com/app/3682/
Other
19 stars 13 forks source link

Help needed to get rid of "Could not load lookup=LOOKUP-app_detail_lookup" #50

Open evslacker opened 2 months ago

evslacker commented 2 months ago

Hey Team,

Recently i noticed that we are facing the error "Could not load lookup=LOOKUP-app_detail_lookup"

the possible reason is that the lookup okta2_app_detail_lookup, the lookup is too big now and have 99,489,851 number of entries.

i am assuming that the automatic lookup is not able to use the lookup due to its size,

can you please suggest any solutions as i cannot delete the Auto Matic lookup from my side.

TA version- Okta Identity Cloud Add-on for Splunk v2.25.21.