https://community.splunk.com/t5/Splunk-Search/Why-is-SPL-receiving-error/m-p/626060#M217608 <P>Its ok I saw the problem was due to the character " I copied and pasted from cherry tree into Splunk and Splunk did not like that.. I had to type the " again</P> Thu, 05 Jan 2023 20:48:33 GMT BongoNations 2023-01-05T20:48:33Z https://community.splunk.com/t5/Splunk-Search/Why-is-SPL-receiving-error/m-p/626053#M217603 <P>Hi I have this SPL query but getting this error?</P> <P><SPAN>Error in 'rename' command: Usage: rename [old_name AS/TO/-&gt; new_name]+.</SPAN></P> <P>Any ideas why or how to resolve this please?</P> <P>| tstats count where index=os earliest=-7d latest=-3h by host, _time span=3h<BR />| stats median(count) as median by host<BR />| join host [| tstats count where index=os earliest=-3h by host]<BR />| eval percentage_diff=((count/median)*100)-100<BR />| where percentage_diff&lt;-5 OR percentage_diff&gt;5<BR />| sort percentage_diff<BR />| rename median as “Median Event Count Past Week”, count as “Event Count of Events Past 3 Hours”, percentage_diff as “Percentage Difference”</P> <P>&nbsp;</P> Thu, 05 Jan 2023 20:22:02 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-SPL-receiving-error/m-p/626053#M217603 BongoNations 2023-01-05T20:22:02Z https://community.splunk.com/t5/Splunk-Search/Why-is-SPL-receiving-error/m-p/626060#M217608 <P>Its ok I saw the problem was due to the character " I copied and pasted from cherry tree into Splunk and Splunk did not like that.. I had to type the " again</P> Thu, 05 Jan 2023 20:48:33 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-SPL-receiving-error/m-p/626060#M217608 BongoNations 2023-01-05T20:48:33Z