https://community.splunk.com/t5/Splunk-Search/Query-in-Verbose-mode-results-but-while-finalising-in-Fast-mode/m-p/449364#M166818 <P>Hi,</P> <P>I have a query which finalises me all JSP pages performance for every month. It provides me correct result in Verbose mode. <BR /> But while running on Fast mode, the results shows up but at the end while finalising, there are no results found for the same query.<BR /> It is strange though. Could someone help me out on what is wrong in here ?</P> <PRE><CODE>index=test page=JSP |eval req = tostring(req) |convert num(AvgWallTime) as AvgWallTime |eval AvgWallTime=if(AvgWallTime=="",0,AvgWallTime) | chart avg(AvgWallTime) as Average over month by req useother=f limit=100 </CODE></PRE> Tue, 30 Oct 2018 10:13:06 GMT sangs8788 2018-10-30T10:13:06Z https://community.splunk.com/t5/Splunk-Search/Query-in-Verbose-mode-results-but-while-finalising-in-Fast-mode/m-p/449364#M166818 <P>Hi,</P> <P>I have a query which finalises me all JSP pages performance for every month. It provides me correct result in Verbose mode. <BR /> But while running on Fast mode, the results shows up but at the end while finalising, there are no results found for the same query.<BR /> It is strange though. Could someone help me out on what is wrong in here ?</P> <PRE><CODE>index=test page=JSP |eval req = tostring(req) |convert num(AvgWallTime) as AvgWallTime |eval AvgWallTime=if(AvgWallTime=="",0,AvgWallTime) | chart avg(AvgWallTime) as Average over month by req useother=f limit=100 </CODE></PRE> Tue, 30 Oct 2018 10:13:06 GMT https://community.splunk.com/t5/Splunk-Search/Query-in-Verbose-mode-results-but-while-finalising-in-Fast-mode/m-p/449364#M166818 sangs8788 2018-10-30T10:13:06Z https://community.splunk.com/t5/Splunk-Search/Query-in-Verbose-mode-results-but-while-finalising-in-Fast-mode/m-p/449365#M166819 <P>Which version of splunk you are using? Did you try using smart mode?</P> Tue, 30 Oct 2018 11:50:02 GMT https://community.splunk.com/t5/Splunk-Search/Query-in-Verbose-mode-results-but-while-finalising-in-Fast-mode/m-p/449365#M166819 p_gurav 2018-10-30T11:50:02Z https://community.splunk.com/t5/Splunk-Search/Query-in-Verbose-mode-results-but-while-finalising-in-Fast-mode/m-p/449366#M166820 <P>Version 7.0.2. The problem is i want this to be add it as a panel in dashboard. I suppose the panels are in fast mode. So i need this to work in fast mode.</P> Wed, 31 Oct 2018 04:49:35 GMT https://community.splunk.com/t5/Splunk-Search/Query-in-Verbose-mode-results-but-while-finalising-in-Fast-mode/m-p/449366#M166820 sangs8788 2018-10-31T04:49:35Z https://community.splunk.com/t5/Splunk-Search/Query-in-Verbose-mode-results-but-while-finalising-in-Fast-mode/m-p/449367#M166821 <P>Got this fixed. Looks like one of the Request name is too large to be a column field name. That is the reason it didnt show the results. </P> Wed, 31 Oct 2018 05:07:53 GMT https://community.splunk.com/t5/Splunk-Search/Query-in-Verbose-mode-results-but-while-finalising-in-Fast-mode/m-p/449367#M166821 sangs8788 2018-10-31T05:07:53Z