Hi,
I am getting this error while trying to drilldown.
How do i escape this issue as i need to use RangeMap.
This is the code i am using:
sourcetype="Log1" | join type=inner UsrName [SEARCH sourcetype="Log2"] | rangemap field=count green=0-4 blue=5-20 red=21-50 default=red
Please Help.
Thanks!
in drilldown rangemap,fieldformat,eval,... cannot be the last search command then you need add another search command ie |stats
, |table
,...
in drilldown rangemap,fieldformat,eval,... cannot be the last search command then you need add another search command ie |stats
, |table
,...