Hi,
I have cleared the selection for both the initial value and the default token options, but it still is giving the "Duplicate values causing conflict" message for both of those options. For a dynamic query, how would it determine the output without executing it. Is it persisting the output of the previous run?
Here is the query I am using:
index=64581-cli sourcetype=show_version | eval hi= split(hostname, ".") | eval hi2=mvindex(hi, 3) | dedup hi2 | stats count by hi2
Thanks and please suggest.
... View more