https://community.splunk.com/t5/Splunk-Search/quot-Error-in-tstats-command-This-command-is-not-supported-in-a/m-p/222761#M65509 <P>The error message explains it all. Searches with tstats can't be used for real-time searches. What is your requirement here?</P> Mon, 20 Jun 2016 16:24:29 GMT somesoni2 2016-06-20T16:24:29Z https://community.splunk.com/t5/Splunk-Search/quot-Error-in-tstats-command-This-command-is-not-supported-in-a/m-p/222760#M65508 <P>I currently have a working tstats search, but when I use real-time, it returns the following error: </P> <PRE><CODE>Error in 'tstats' command: This command is not supported in a real-time search </CODE></PRE> Mon, 20 Jun 2016 16:18:54 GMT https://community.splunk.com/t5/Splunk-Search/quot-Error-in-tstats-command-This-command-is-not-supported-in-a/m-p/222760#M65508 spammenot66 2016-06-20T16:18:54Z https://community.splunk.com/t5/Splunk-Search/quot-Error-in-tstats-command-This-command-is-not-supported-in-a/m-p/222761#M65509 <P>The error message explains it all. Searches with tstats can't be used for real-time searches. What is your requirement here?</P> Mon, 20 Jun 2016 16:24:29 GMT https://community.splunk.com/t5/Splunk-Search/quot-Error-in-tstats-command-This-command-is-not-supported-in-a/m-p/222761#M65509 somesoni2 2016-06-20T16:24:29Z https://community.splunk.com/t5/Splunk-Search/quot-Error-in-tstats-command-This-command-is-not-supported-in-a/m-p/222762#M65510 <P>Not only will it never work but it doesn't even make sense how it could. Use <CODE>stats</CODE> instead and have it operate on the events as they come in to your real-time window. Better yet, do not use real-time! It almost certainly will not give you what you desire and it will crater the performance of your splunk cluster.</P> Mon, 20 Jun 2016 17:34:17 GMT https://community.splunk.com/t5/Splunk-Search/quot-Error-in-tstats-command-This-command-is-not-supported-in-a/m-p/222762#M65510 woodcock 2016-06-20T17:34:17Z https://community.splunk.com/t5/Splunk-Search/quot-Error-in-tstats-command-This-command-is-not-supported-in-a/m-p/222763#M65511 <P>Thanks for the info</P> Thu, 04 Aug 2016 02:40:53 GMT https://community.splunk.com/t5/Splunk-Search/quot-Error-in-tstats-command-This-command-is-not-supported-in-a/m-p/222763#M65511 spammenot66 2016-08-04T02:40:53Z