https://community.splunk.com/t5/Splunk-Search/tstats-in-macro-without-pipe/m-p/337239#M100053 <P>Hello,</P> <P>is it normal that tstats must be <EM>without</EM> pipe | to run in a macro?</P> <P>The macro is scheduled.</P> <P>Thanks.</P> Fri, 09 Mar 2018 13:52:32 GMT splunkreal 2018-03-09T13:52:32Z https://community.splunk.com/t5/Splunk-Search/tstats-in-macro-without-pipe/m-p/337239#M100053 <P>Hello,</P> <P>is it normal that tstats must be <EM>without</EM> pipe | to run in a macro?</P> <P>The macro is scheduled.</P> <P>Thanks.</P> Fri, 09 Mar 2018 13:52:32 GMT https://community.splunk.com/t5/Splunk-Search/tstats-in-macro-without-pipe/m-p/337239#M100053 splunkreal 2018-03-09T13:52:32Z https://community.splunk.com/t5/Splunk-Search/tstats-in-macro-without-pipe/m-p/337240#M100054 <P>It is normal (expected behavior) that a macro cannot start with a pipe, regardless of whether it's used in a scheduled search or an ad-hoc search.</P> Fri, 09 Mar 2018 13:56:58 GMT https://community.splunk.com/t5/Splunk-Search/tstats-in-macro-without-pipe/m-p/337240#M100054 elliotproebstel 2018-03-09T13:56:58Z