https://community.splunk.com/t5/Splunk-Search/Return-command-giving-error-for-stats-c-eval-in-splunk/m-p/340588#M101018 <P>Hello Everyone,</P> <P>Am creating the dynamic query depending on condition and after that using <CODE>return</CODE> command to execute that search query string, below is my search query</P> <PRE><CODE> [ | search query which gives me dynamic string.... | return $myquery ] </CODE></PRE> <P>where $myquery contain <CODE>index=xyz | stats c(eval(eventtype="myeventtype1")) as "myeventtype1", c(eval(eventtype="myeventtype2")) as "myeventtype2"</CODE></P> <P>but its giving me the error (actually its putting the each eventtype value while executing), is there any way where we can execute this query without any error?</P> <P>Note: when i execute myquery string manually its perfectly working fine.</P> <P>Can any on help me here?</P> <P>Thank you </P> Mon, 06 Mar 2017 13:28:01 GMT snehalk 2017-03-06T13:28:01Z https://community.splunk.com/t5/Splunk-Search/Return-command-giving-error-for-stats-c-eval-in-splunk/m-p/340588#M101018 <P>Hello Everyone,</P> <P>Am creating the dynamic query depending on condition and after that using <CODE>return</CODE> command to execute that search query string, below is my search query</P> <PRE><CODE> [ | search query which gives me dynamic string.... | return $myquery ] </CODE></PRE> <P>where $myquery contain <CODE>index=xyz | stats c(eval(eventtype="myeventtype1")) as "myeventtype1", c(eval(eventtype="myeventtype2")) as "myeventtype2"</CODE></P> <P>but its giving me the error (actually its putting the each eventtype value while executing), is there any way where we can execute this query without any error?</P> <P>Note: when i execute myquery string manually its perfectly working fine.</P> <P>Can any on help me here?</P> <P>Thank you </P> Mon, 06 Mar 2017 13:28:01 GMT https://community.splunk.com/t5/Splunk-Search/Return-command-giving-error-for-stats-c-eval-in-splunk/m-p/340588#M101018 snehalk 2017-03-06T13:28:01Z https://community.splunk.com/t5/Splunk-Search/Return-command-giving-error-for-stats-c-eval-in-splunk/m-p/340589#M101019 <P>Why bother with the extra stuff; just do this ( <CODE>search</CODE> is a special field name returning from subsearches):</P> <PRE><CODE> [ | search query which gives me dynamic string.... | rename myquery AS search ] </CODE></PRE> Sat, 25 Mar 2017 09:44:59 GMT https://community.splunk.com/t5/Splunk-Search/Return-command-giving-error-for-stats-c-eval-in-splunk/m-p/340589#M101019 woodcock 2017-03-25T09:44:59Z