Dashboards & Visualizations

Encountered an unexpected error while parsing intentions

jangid
Builder

I created a Dashboard from following search

sourcetype="TAFC_LOG_LINE" MANAGER | table _time _raw TransactionUUID | rename TransactionUUID as UUID | streamstats range(_time) as Duration by UUID | where Duration > 0.0

Now in Dashboard there is two option
UUID
Duration

When I click on duration I got above error with below message

PARSER: Applying intentions failed Unable to drilldown because of post-reporting 'streamstats' command

Here is the XML for Dashboard
<?xml version='1.0' encoding='utf-8'?>




UUID
UUID
line


Tags (2)
1 Solution

jangid
Builder

I modified my query and now its work.

View solution in original post

0 Karma

jangid
Builder

I modified my query and now its work.

0 Karma

jangid
Builder

is there any solution available for this ?

0 Karma

Ayn
Legend

Just putting this as a comment because it's not really an answer, but I suspect your problems might have something common with this: http://splunk-base.splunk.com/answers/6076/parser-error-on-drilldown-when-using-table

0 Karma

jangid
Builder

Any update regarding my question?

0 Karma
Get Updates on the Splunk Community!

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...