topic Re: How can use map command ? in Dashboards & Visualizations

How can use map command ?

rasty — Mon, 16 Apr 2018 12:53:14 GMT

Hi All,

index="deneme_index6" | spath output=QueryName path="CxXMLResults.Query{@name}" | mvexpand QueryName | table QueryName | map search="search index='deneme_index6' CxXMLReports.Query{@name}=$QueryName$ | table CxXMLReports.Query{@name}"

Just I'm making examples, There is not specific reason of above operation, I just try to understand. Why I'm getting error like "No results found."

Re: How can use map command ?

logloganathan — Tue, 29 Sep 2020 19:06:25 GMT

Could you please try this query

index="deneme_index6" | spath output=QueryName path="CxXMLResults.Query{@name}" | mvexpand QueryName | table QueryName | map search="search index='deneme_index6' CxXMLReports.Query{@name}=$QueryName$ | table CxXMLReports.Query{@name}" maxsearches=10

Re: How can use map command ?

niketn — Mon, 16 Apr 2018 14:17:04 GMT

@rasty, I have provided another answer with Run Anywhere Example for your previous question: https://answers.splunk.com/answers/642422/xml-nested-field-issues.html

Can you please try out and confirm? Also since this question is on similar lines to your previous question, please confirm whether we can close this one.

Re: How can use map command ?

rasty — Mon, 16 Apr 2018 17:10:07 GMT

We solved my problem with @niketnilay in https://answers.splunk.com/answers/642422/xml-nested-field-issues.html