I have a series of fields I've extracted using the GUI for a particular sourcetype. I've also set up a lookup table, definition, and automatic lookup using one of those fields. The automatic lookup is supposed to add a field from the lookup table. However, I cannot get it to work with fields that have been extracted using the GUI. Is there something I'm missing? Automatic lookups work just fine on sourcetypes with fields that have been automatically extracted (ie, they arrive at Splunk as "key=value" pairs and require no additional extraction).
Any hints?