# WHOIS Lookup Not Loading into fields **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [March 9, 2018, 7:15pm UTC](https://community.graylog.org/t/whois-lookup-not-loading-into-fields/4510 "2018-03-09T19:15:22Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![haywhai](https://avatars.discourse-cdn.com/v4/letter/h/bbe5ce/32.png) [@haywhai](https://community.graylog.org/u/haywhai)\ **Post date:** [March 9, 2018, 7:15pm UTC](https://community.graylog.org/t/whois-lookup-not-loading-into-fields/4510/1 "2018-03-09T19:15:22Z")
I integrated the Whois plugin and the lookup table test worked pretty fine. Refer to the screenshot below: ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/e/e7e5210f37138af4d24a86d814ef9b4fa6c1b785.png) Now, i created a rule for it to create a field and populate the field with the corresponding “single value” of the lookup result. Refer to the screenshot below for the rule: ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/0/09eafc1743c543118809ff03ea8b7ad8d34281cc.png) The rule creates the field Src\_WHOIS but the only value it holds is just “None” but it doesnt populate the field with the single value i desire to see. Please, what am i doing wrong? Thanks ---
**Author:** ![haywhai](https://avatars.discourse-cdn.com/v4/letter/h/bbe5ce/32.png) [@haywhai](https://community.graylog.org/u/haywhai)\ **Post date:** [March 9, 2018, 7:17pm UTC](https://community.graylog.org/t/whois-lookup-not-loading-into-fields/4510/2 "2018-03-09T19:17:05Z")
![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/2/228b8ddba84765f7f0a7f7c867cd5677fb630ef4.png) ---
**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\ **Post date:** [March 10, 2018, 8:52am UTC](https://community.graylog.org/t/whois-lookup-not-loading-into-fields/4510/3 "2018-03-10T08:52:03Z")
What’s the exact name of the lookup table? It’s case-sensitive. What’s the content of the “DstAddr” and “src\_ip” fields of the messages? Again, they’re case-sensitive. Please provide some examples. You can also use the [`debug()`](http://docs.graylog.org/en/2.4/pages/pipelines/functions.html#debug) function or the pipeline simulator to find out what your functions are doing. ---
**Author:** ![haywhai](https://avatars.discourse-cdn.com/v4/letter/h/bbe5ce/32.png) [@haywhai](https://community.graylog.org/u/haywhai)\ **Post date:** [March 10, 2018, 7:02pm UTC](https://community.graylog.org/t/whois-lookup-not-loading-into-fields/4510/4 "2018-03-10T19:02:37Z")
@jochen 1. The exact name of the lookup table is Whois. i feel the “None” shouldnt have worked in the first place if the name of the lookup table is wrong. 2. the content of both the DstAddr and src\_ip are destination addresses and source addresses respectively. It was an extractor i used in naming both fields and both are working fine. 3. where do i run the debug() function please? ---
**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\ **Post date:** [March 12, 2018, 7:51am UTC](https://community.graylog.org/t/whois-lookup-not-loading-into-fields/4510/5 "2018-03-12T07:51:31Z")
> [@haywhai](#): > > where do i run the debug() function please? You can add the [`debug()`](http://docs.graylog.org/en/2.4/pages/pipelines/functions.html#debug) function to any rule to print the value of its argument in the logs of the Graylog node running the rule. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [March 26, 2018, 7:52am UTC](https://community.graylog.org/t/whois-lookup-not-loading-into-fields/4510/6 "2018-03-26T07:52:10Z")
Closed on March 26, 2018, 7:52am UTC This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.