I have a search that displays a timechart correctly in the search area but not when I'm trying to display it on a form.
The purpose of the search is to display a timechart from two searches. The subsearch is meant to bring back 1 value that is used as a constant value (kind of like an avg line).
sourcetype=source1 VName="$input1$" LKPA="$input2$" OR LKPZ="$input2$" | fields modID | eval tsInServ = [search sourcetype=source2 SRCA=$input2$ OR SRCZ=$input2$ Status="blah" | stats dc(Entity_ID) AS query] | timechart span=1mon dc(modID),max(tsInServ)
Again, works in the search area, but not when i put it in a form/dashboard - I get the following error and the chart shows up blank
PARSER: Applying intentions failed This search cannot be parsed when parse_only is set to true
Any help would be appreciated!