Dashboards & Visualizations

Encountered an unexpected error while parsing intentions

jangid
Builder

I created a Dashboard from following search

sourcetype="TAFC_LOG_LINE" MANAGER | table _time _raw TransactionUUID | rename TransactionUUID as UUID | streamstats range(_time) as Duration by UUID | where Duration > 0.0

Now in Dashboard there is two option
UUID
Duration

When I click on duration I got above error with below message

PARSER: Applying intentions failed Unable to drilldown because of post-reporting 'streamstats' command

Here is the XML for Dashboard
<?xml version='1.0' encoding='utf-8'?>




UUID
UUID
line


Tags (2)
1 Solution

jangid
Builder

I modified my query and now its work.

View solution in original post

0 Karma

jangid
Builder

I modified my query and now its work.

0 Karma

jangid
Builder

is there any solution available for this ?

0 Karma

Ayn
Legend

Just putting this as a comment because it's not really an answer, but I suspect your problems might have something common with this: http://splunk-base.splunk.com/answers/6076/parser-error-on-drilldown-when-using-table

0 Karma

jangid
Builder

Any update regarding my question?

0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...