Splunk Search

Why do I get this error in my search?

cj04
Explorer
<title> Clam Scan Results </title> <event>
<search> ref="anti-virus scan results">
</search>
<option name="list.drilldown"
>none</option>
 
error in 'search' command: unable to parse the search: Comparator '<' is missing a term on the left hand side?
Labels (1)
Tags (2)
0 Karma

cj04
Explorer

Removed the > before ref, still the same result. Anymore suggestions?

0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @cj04 

if can you share the full full code for that panel/row 
that would helpfull to troubleshoot furthur 

0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @cj04  

search has > beofre ref which is not reqired 

<title> Clam Scan Results </title>
<search ref="anti-virus scan results"></search>
<option name="list.drilldown">none</option>
0 Karma
Get Updates on the Splunk Community!

Join Us at the Builder Bar at .conf24 – Empowering Innovation and Collaboration

What is the Builder Bar? The Builder Bar is more than just a place; it's a hub of creativity, collaboration, ...

Combine Multiline Logs into a Single Event with SOCK - a Guide for Advanced Users

This article is the continuation of the “Combine multiline logs into a single event with SOCK - a step-by-step ...

Everything Community at .conf24!

You may have seen mention of the .conf Community Zone 'round these parts and found yourself wondering what ...