Splunk Search
Highlighted

Unknown search command 'gauge'.

Explorer

Hi Guys,

i am new to SPLUNK.

when i search a query with non admin user i am getting below error,

Unknown search command 'gauge'.

i guess this may be problem with some capabilities, but not sure which one.

can any one help me please to fix the issue.

Tags (2)
Highlighted

Re: Unknown search command 'gauge'.

Motivator

Please post the actual search string you are having difficulty with, and the specific error message. Your query is too vague.

Highlighted

Re: Unknown search command 'gauge'.

Explorer

these was working fine till 31st July 2014. from 1st Aug onwards we had problem with gauge class.

saying " unknown search command 'gauge' "

the query is

index="wcpidx" sourcetype="jtclog" Operation="{String:TopUpWithCard}"|stats count(eval(EventType="{String:Request}")) AS total, count(eval(EventType="{String:Reply}")) AS complete | eval success%=round(((complete/total)*100),1)|fillnull success% value=0 | gauge success%

0 Karma
Highlighted

Re: Unknown search command 'gauge'.

Communicator

The problem doesn't jump out at me directly, but perhaps the usage of % in an eval field is gumming up the works. Can you try changing the variable name from success% to success? I am wondering if splunk is considering that a modulo operator isntead of a variable.

0 Karma
Highlighted

Re: Unknown search command 'gauge'.

SplunkTrust
SplunkTrust

What happened on 31st July 2014?

Any upgrades?

0 Karma
Highlighted

Re: Unknown search command 'gauge'.

Explorer

thanks for your advice.
the issue is resolved, its some compatibility issues with the user.

0 Karma
Highlighted

Re: Unknown search command 'gauge'.

Contributor

Hi.. let me know the capability required for the user to use gauge command