https://community.splunk.com/t5/Reporting/Why-does-the-appendpipe-command-work-but-I-get-an-error-with/m-p/212138#M4461 <P>@woodcock<BR /> But appendpipe is giving the correct results (I appendpiped different savedsearches to validate).<BR /> I was thinking there is some issue with append instead. This is because I am not trying to do anything fancy. Just appending results of multiple savedsearches, which are working fine when run individually.</P> <P>If my approach of appendpipe is not correct, what other command/way should I follow instead?</P> <P>Thanks<BR /> Ishaan</P> Wed, 04 Nov 2015 11:21:42 GMT ishaanshekhar 2015-11-04T11:21:42Z https://community.splunk.com/t5/Reporting/Why-does-the-appendpipe-command-work-but-I-get-an-error-with/m-p/212135#M4458 <P>Hi,</P> <P>I have a saved search which is working fine and gives fine results using <CODE>|loadjob</CODE> command.</P> <P>However, when I use <CODE>append</CODE> command for the same saved search, I get an error.</P> <P>Interestingly, when I use <CODE>appendpipe</CODE> command instead of append, it works fine.</P> <P>Curious to know why <CODE>append</CODE> doesn't work and <CODE>appendpipe</CODE> does when working with multiple saved searches?</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/782iEC6BDE57E62E11DA/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Tue, 03 Nov 2015 12:16:26 GMT https://community.splunk.com/t5/Reporting/Why-does-the-appendpipe-command-work-but-I-get-an-error-with/m-p/212135#M4458 ishaanshekhar 2015-11-03T12:16:26Z https://community.splunk.com/t5/Reporting/Why-does-the-appendpipe-command-work-but-I-get-an-error-with/m-p/212136#M4459 <P>You actually are experiencing the same error it is just that <CODE>appendpipe</CODE> does not pass the error back to you (hides it) whereas <CODE>append</CODE> does indicate the error back to the user. IMHO, this is a bug in <CODE>appendpipe</CODE> and somebody (I vote for you) should open a support case.</P> Tue, 03 Nov 2015 14:38:01 GMT https://community.splunk.com/t5/Reporting/Why-does-the-appendpipe-command-work-but-I-get-an-error-with/m-p/212136#M4459 woodcock 2015-11-03T14:38:01Z https://community.splunk.com/t5/Reporting/Why-does-the-appendpipe-command-work-but-I-get-an-error-with/m-p/212137#M4460 <P>Who is the owner of the search? Could you try to change the owner of the saved search to be 'nobody' (need to update local.meta file under the application search for this saved search.), run the search again and try the search.</P> Tue, 03 Nov 2015 14:57:40 GMT https://community.splunk.com/t5/Reporting/Why-does-the-appendpipe-command-work-but-I-get-an-error-with/m-p/212137#M4460 somesoni2 2015-11-03T14:57:40Z https://community.splunk.com/t5/Reporting/Why-does-the-appendpipe-command-work-but-I-get-an-error-with/m-p/212138#M4461 <P>@woodcock<BR /> But appendpipe is giving the correct results (I appendpiped different savedsearches to validate).<BR /> I was thinking there is some issue with append instead. This is because I am not trying to do anything fancy. Just appending results of multiple savedsearches, which are working fine when run individually.</P> <P>If my approach of appendpipe is not correct, what other command/way should I follow instead?</P> <P>Thanks<BR /> Ishaan</P> Wed, 04 Nov 2015 11:21:42 GMT https://community.splunk.com/t5/Reporting/Why-does-the-appendpipe-command-work-but-I-get-an-error-with/m-p/212138#M4461 ishaanshekhar 2015-11-04T11:21:42Z