Reporting

query incompatibility from Splunk upgrade to 7.1.1: set intersect command.pivot not working

architkhanna
Path Finder

I have a below query which is working perfectly fine in splunk 6.6.4
after upgrading to new Splunk version 7.1.1 , the query is showing now result found. This is a multi select drop down.

| set intersect [| pivot ticket_feed_dm ticket_feed_obj SPLITROW current_ticket_state | eval current_ticket_state = trim(current_ticket_state) | table current_ticket_state] [| inputlookup ticketState_lookup | search Category = $res_un$ | rename Sub-Category as sub_category | eval sub_category = trim(sub_category) | table sub_category]

Any leads would be helpful.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Unified Identity - Now Available for Existing Splunk ...

Raise your hand if you’ve already forgotten your username or password when logging into an account. (We can’t ...

Index This | How many sides does a circle have?

February 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...