After upgrading from Splunk 6.0.1 to 6.2.1, why are pivots not working and piechart labels are displayed as "undefined"?

[balaji_venkat]

Hi Team,

We migrated the code from 6.0.1 to version 6.2.1. Following issues we faced :

1) range command is not working in upgraded version of data model.e.g

 | pivot ABC range(_time) as duration

2) Pie chart labels are not coming up (undefined is coming up) but whenever the page refreshes it comes up for short duration of time

3) Pivot command is not working in upgraded version at all.e.g

| pivot ABC Total__of_unmatched_Data dc(ID) AS "Count" SPLITROW data_date 

When we retrieved the pivot search in both versions using job inspection, the searc was different in both versions. I will provide you those searches if required.

Please let us know how to resolve these issues in upgraded 6.2.1 version.

[lharichandan]

Hi Team,

I have uploaded the latest version of splunk, and I have also been facing issue#2.

Please let me know, how to resolve this.

Thanks.

[ppablo]

Hi @balaji_venkat

I don't know the answers to issues #1 and #3, but #2 regarding pie chart labels being "undefined" was addressed in this previous Answers post. This was a bug found in 6.2.0 that was fixed in Splunk 6.2.2
http://answers.splunk.com/answers/180501/resizing-the-browser-window-sets-pie-chart-labels.html