Dashboards & Visualizations

PARSER: Applying intentions failed Unable to drilldown because of post-reporting 'rangemap' command

alenseb
Communicator

Hi,

I am getting this error while trying to drilldown.
How do i escape this issue as i need to use RangeMap.

This is the code i am using:
sourcetype="Log1" | join type=inner UsrName [SEARCH sourcetype="Log2"] | rangemap field=count green=0-4 blue=5-20 red=21-50 default=red

Please Help.
Thanks!

Tags (2)
1 Solution

MarioM
Motivator

in drilldown rangemap,fieldformat,eval,... cannot be the last search command then you need add another search command ie |stats, |table,...

View solution in original post

MarioM
Motivator

in drilldown rangemap,fieldformat,eval,... cannot be the last search command then you need add another search command ie |stats, |table,...

Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...