Question:

Why am I receiving the error  "Lookup: file=/{ORGID}/sumo:/threat/cs doesn't exist."  when using the Sumo Logic Threat lookup database.

Answer:

This error will occur when attempting to run a threat lookup query within a Sumo Logic Free account. The Sumo Logic Threat Intel lookup database is only available within Sumo Logic paid plans or during the first 30-day trial.