Getting duplicate rename fields error after upgrade from 6.3.0 to 6.4.2

[bandit]

The following search worked prior to upgrade:

| stats sparkline count dc(sourcetype) as sourcetype last(_raw) as last_raw_msg values(sourcetype) as sourcetype last(_time) as earliest_msg_time first(_time) as latest_msg_time values(index) as index by punct
| eval delta=round((latest_msg_time-earliest_msg_time),0)
| eval msg_per_sec=round((count/delta),2)
| convert ctime(earliest_msg_time) ctime(latest_msg_time)
| table last_raw_msg count sourcetype sparkline msg_per_sec sourcetype earliest_msg_time latest_msg_time
| sort -count

Error in 'stats' command: 1 duplicate rename field(s)

[somesoni2 · Accepted solution]

You do have a duplicate stats functions dc(sourcetype) as sourcetype and values(sourcetype) as sourcetype. I can't imagine this would have worked in 6.3.0.

Any how, you can (should) change the name of one of them.

[bandit]

Thanks, Somesh
My brain wasn't registering that "as" is equivalent to the "rename" command.

Rob