Dashboards & Visualizations

Encountered an unexpected error while parsing intentions

jangid
Builder

I created a Dashboard from following search

sourcetype="TAFC_LOG_LINE" MANAGER | table _time _raw TransactionUUID | rename TransactionUUID as UUID | streamstats range(_time) as Duration by UUID | where Duration > 0.0

Now in Dashboard there is two option
UUID
Duration

When I click on duration I got above error with below message

PARSER: Applying intentions failed Unable to drilldown because of post-reporting 'streamstats' command

Here is the XML for Dashboard
<?xml version='1.0' encoding='utf-8'?>




UUID
UUID
line


Tags (2)
1 Solution

jangid
Builder

I modified my query and now its work.

View solution in original post

0 Karma

jangid
Builder

I modified my query and now its work.

0 Karma

jangid
Builder

is there any solution available for this ?

0 Karma

Ayn
Legend

Just putting this as a comment because it's not really an answer, but I suspect your problems might have something common with this: http://splunk-base.splunk.com/answers/6076/parser-error-on-drilldown-when-using-table

0 Karma

jangid
Builder

Any update regarding my question?

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...