Splunk Search

searches on 7.2.0 doesnt works while on 7.1.6 and below it does work

rajrsplunk
Explorer

examples :
index=sentinelone (host="*") sourcetype=threats| fillnull siteName value="NULL" | search (siteName="Andre") |dedup id| makemv delim=", " "engines[]" | rename engines{} as Engines| rex field=Engines mode=sed "s/_/-/g" | top Engines

index=sentinelone (host="*") sourcetype=threats| fillnull siteName value="NULL" | search (siteName="Andre") | dedup id | rename fileDisplayName as Name | stats count(Name) as countName by Name | sort 15 - countName

it returns no results on 7.2.0 while returning results on 7.16 and below

Tags (2)
0 Karma
Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...