<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: While calling macro with Argument, &amp;quot;Error in 'SearchParser'&amp;quot; Error is thrown in Knowledge Management</title>
    <link>https://community.splunk.com/t5/Knowledge-Management/While-calling-macro-with-Argument-quot-Error-in-SearchParser/m-p/85875#M873</link>
    <description>&lt;P&gt;I see this is an older question, hopefully you found a solution to this. I was just working though a similar issue when I found this post. I found the issue to be a hard return at the end of my macro. I was cutting and pasting from an external editor and had grabbed a hard return on the end by accident. My error was something along the lines of 'last argument of appendcols must be a subsearch'.  After I removed that hard return, it worked.&lt;/P&gt;</description>
    <pubDate>Wed, 31 Oct 2012 20:08:44 GMT</pubDate>
    <dc:creator>DaveO35</dc:creator>
    <dc:date>2012-10-31T20:08:44Z</dc:date>
    <item>
      <title>While calling macro with Argument, "Error in 'SearchParser'" Error is thrown</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/While-calling-macro-with-Argument-quot-Error-in-SearchParser/m-p/85872#M870</link>
      <description>&lt;P&gt;I have Configured Macro with arguments, &lt;/P&gt;

&lt;P&gt;While calling the macroname with arguments , &lt;/P&gt;

&lt;P&gt;It is throwing error&lt;/P&gt;

&lt;P&gt;&lt;EM&gt;Error in 'SearchParser': Missing a search command before ' '.&lt;/EM&gt;&lt;/P&gt;

&lt;P&gt;Please let me know why I am seeing this..&lt;/P&gt;

&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Tue, 04 Oct 2011 11:33:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/While-calling-macro-with-Argument-quot-Error-in-SearchParser/m-p/85872#M870</guid>
      <dc:creator>jshanaiah</dc:creator>
      <dc:date>2011-10-04T11:33:45Z</dc:date>
    </item>
    <item>
      <title>Re: While calling macro with Argument, "Error in 'SearchParser'" Error is thrown</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/While-calling-macro-with-Argument-quot-Error-in-SearchParser/m-p/85873#M871</link>
      <description>&lt;P&gt;Can you post the macro search string and the name of the macro here please?&lt;/P&gt;</description>
      <pubDate>Tue, 04 Oct 2011 16:21:44 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/While-calling-macro-with-Argument-quot-Error-in-SearchParser/m-p/85873#M871</guid>
      <dc:creator>rroberts</dc:creator>
      <dc:date>2011-10-04T16:21:44Z</dc:date>
    </item>
    <item>
      <title>Re: While calling macro with Argument, "Error in 'SearchParser'" Error is thrown</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/While-calling-macro-with-Argument-quot-Error-in-SearchParser/m-p/85874#M872</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;Macro Search string used is as follows,&lt;/P&gt;

&lt;P&gt;index=trans tranTypeId = 1 AND tranDestinationId=1 AND promoCode=$promocode$| eval series="Total Registrations Atempts" | chart count by series &lt;/P&gt;

&lt;P&gt;registrationPromo(1) is the name of the macro..&lt;/P&gt;</description>
      <pubDate>Sat, 08 Oct 2011 03:51:32 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/While-calling-macro-with-Argument-quot-Error-in-SearchParser/m-p/85874#M872</guid>
      <dc:creator>jshanaiah</dc:creator>
      <dc:date>2011-10-08T03:51:32Z</dc:date>
    </item>
    <item>
      <title>Re: While calling macro with Argument, "Error in 'SearchParser'" Error is thrown</title>
      <link>https://community.splunk.com/t5/Knowledge-Management/While-calling-macro-with-Argument-quot-Error-in-SearchParser/m-p/85875#M873</link>
      <description>&lt;P&gt;I see this is an older question, hopefully you found a solution to this. I was just working though a similar issue when I found this post. I found the issue to be a hard return at the end of my macro. I was cutting and pasting from an external editor and had grabbed a hard return on the end by accident. My error was something along the lines of 'last argument of appendcols must be a subsearch'.  After I removed that hard return, it worked.&lt;/P&gt;</description>
      <pubDate>Wed, 31 Oct 2012 20:08:44 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Knowledge-Management/While-calling-macro-with-Argument-quot-Error-in-SearchParser/m-p/85875#M873</guid>
      <dc:creator>DaveO35</dc:creator>
      <dc:date>2012-10-31T20:08:44Z</dc:date>
    </item>
  </channel>
</rss>

