topic Unknown search command 'gauge'. in Splunk Search

Unknown search command 'gauge'.

polamarasetti — Fri, 01 Aug 2014 13:03:35 GMT

Hi Guys,

i am new to SPLUNK.

when i search a query with non admin user i am getting below error,

Unknown search command 'gauge'.

i guess this may be problem with some capabilities, but not sure which one.

can any one help me please to fix the issue.

Re: Unknown search command 'gauge'.

grijhwani — Fri, 01 Aug 2014 13:38:07 GMT

Please post the actual search string you are having difficulty with, and the specific error message. Your query is too vague.

Re: Unknown search command 'gauge'.

polamarasetti — Mon, 28 Sep 2020 17:15:19 GMT

these was working fine till 31st July 2014. from 1st Aug onwards we had problem with gauge class.

saying " unknown search command 'gauge' "

the query is

index="wcp_idx" sourcetype="jtc_log" Operation="{String:TopUpWithCard}"|stats count(eval(EventType="{String:Request}")) AS total, count(eval(EventType="{String:Reply}")) AS complete | eval success%=round(((complete/total)*100),1)|fillnull success% value=0 | gauge success%

Re: Unknown search command 'gauge'.

derekarnold — Tue, 05 Aug 2014 15:54:15 GMT

The problem doesn't jump out at me directly, but perhaps the usage of % in an eval field is gumming up the works. Can you try changing the variable name from success% to success? I am wondering if splunk is considering that a modulo operator isntead of a variable.

Re: Unknown search command 'gauge'.

somesoni2 — Tue, 05 Aug 2014 16:11:02 GMT

What happened on 31st July 2014?

Any upgrades?

Re: Unknown search command 'gauge'.

polamarasetti — Wed, 06 Aug 2014 07:21:37 GMT

thanks for your advice.
the issue is resolved, its some compatibility issues with the user.

Re: Unknown search command 'gauge'.

srinathd — Wed, 25 Feb 2015 16:31:47 GMT

Hi.. let me know the capability required for the user to use gauge command