I have a search that works against a key value pair in Connect Direct logs. Initially I had the report set up to do post-process re-naming of the SNOD value to the human readable name. Yesterday I added a lookup table and ran the search multiple times with the expected results, i.e., the lookup worked.
I replaced the search in the Dashboard panel with the new search and was told "zero results." I ran the inspector and it stated:
This search has completed and found 2,764 matching events. However, the transforming commands in the highlighted portion of the following search: