Query in Verbose mode results but while finalising in Fast mode, the results arent displaying ?

[sangs8788]

Hi,

I have a query which finalises me all JSP pages performance for every month. It provides me correct result in Verbose mode.
But while running on Fast mode, the results shows up but at the end while finalising, there are no results found for the same query.
It is strange though. Could someone help me out on what is wrong in here ?

index=test  page=JSP  |eval req = tostring(req) |convert num(AvgWallTime) as AvgWallTime |eval AvgWallTime=if(AvgWallTime=="",0,AvgWallTime) | chart avg(AvgWallTime) as Average  over month by req useother=f limit=100

[sangs8788 · Accepted solution]

Got this fixed. Looks like one of the Request name is too large to be a column field name. That is the reason it didnt show the results.

[p_gurav]

Which version of splunk you are using? Did you try using smart mode?

[sangs8788]

Version 7.0.2. The problem is i want this to be add it as a panel in dashboard. I suppose the panels are in fast mode. So i need this to work in fast mode.