Newly upgraded Splunk to 8.1.5 from 7.3.x and seeing the below error message on DMC Search Activity:Instance
Multiple renames to field 'Type' detected. Only the last one will appear, and previous 'from' fields will be dropped.
Any ideas or suggestions on how to fix this ?
You can drill down into the search, and just remove the last rename. delete this - search_props.type as "Type"If you take that off it will work without error.