Reporting

query incompatibility from Splunk upgrade to 7.1.1: set intersect command.pivot not working

architkhanna
Path Finder

I have a below query which is working perfectly fine in splunk 6.6.4
after upgrading to new Splunk version 7.1.1 , the query is showing now result found. This is a multi select drop down.

| set intersect [| pivot ticket_feed_dm ticket_feed_obj SPLITROW current_ticket_state | eval current_ticket_state = trim(current_ticket_state) | table current_ticket_state] [| inputlookup ticketState_lookup | search Category = $res_un$ | rename Sub-Category as sub_category | eval sub_category = trim(sub_category) | table sub_category]

Any leads would be helpful.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...