I have a output lookup command which returns 4 rows via saved search when ran independently.
However,on running the input lookup command, I see only 3 rows and hence my panels are populating wrong.
Any limitations are there in the command. I am not sure where is this going wrong.
TIA.
outputlookup should put same results as the outcome of the events.
Please check
- if your time range is exactly(precisely) the same when you tested and when the savedsearch ran
- Check if the savedsearch ran again on top and saved another result than your expected time range
Please give us the actual dataset and savedsearches query to debug more