Not showing field in tstats query that is defiend in datamodel.

[abhishekpatel2]

We have datamodel which has 2 level DataSet(Datamodel-> Parent Dataset -> Child Dataset). We have defiend a field in Child Dataset and we are able to see that field value on preview. 
Datamodel: Catalyst_App
Parent Dataset: Catalyst_Dataset

Child Dataset: Security_Advisories_Events

Field: Category

So when we are trying to run the following tstats query:

| tstats summariesonly=false values(Catalyst_Dataset.Security_Advisories_Events.Category) from datamodel=Catalyst_App where nodename=Catalyst_Dataset.Security_Advisories_Events

We are getting no results. But at the same time when we run the following datamodel query:

| datamodel Catalyst_App Security_Advisories_Events search
| fillnull value="-"
| table Catalyst_Dataset.Security_Advisories_Events.Category

We are getting category values in datamodel query.

[gcusello]

Hi @abhishekpatel2,

try adding the BY clause:

| tstats summariesonly=false 
     count
     FROM datamodel=Cisco_Catalyst_App 
     WHERE where nodename=Cisco_Catalyst_Dataset.Cisco_Security_Advisories_Events
     BY Catalyst_Dataset.Security_Advisories_Events.Category
| table Catalyst_Dataset.Security_Advisories_Events.Category

Ciao.

Giuseppe

[abhishekpatel2]

Tried this but have no luck with this.

[abhishekpatel2]

I tried that too, but in that I am getting no results.

[gcusello]

Hi @abhishekpatel2 ,

try to create your search using Pivot, starting from your DataModel.

Then see in Job Inspector the generated search, maybe there's an error in field names.

Ciao.

Giuseppe

[abhishekpatel2]

Not helpful as all the fields are correct.