can anyone help me with the issue I get from time to time on my dashboard built using splunk dashboard studio:
for some reason this error occurs only for maps here's the query
| tstats ...
See more...
can anyone help me with the issue I get from time to time on my dashboard built using splunk dashboard studio:
for some reason this error occurs only for maps here's the query
| tstats count from datamodel=Cisco_Security.ASA_Dataset where index IN (add_on_builder_index, adoption_metrics, audit_summary, ba_test, cim_modactions, cisco_duo, cisco_etd, cisco_se, cisco_secure_fw, cisco_sfw_ftd_syslog, cisco_sma, cisco_sna, cisco_xdr, duo, encore, endpoint_summary, fw_syslog, history, ioc, main, mcd, mcd_syslog, new_index_for_endpoint, notable, notable_summary, resource_usage_test_index, risk, secure_malware_analytics, sequenced_events, summary, threat_activity, ubaroute, ueba, whois) ASA_Dataset.event_type_filter_options IN (*) ASA_Dataset.severity_level_filter_options IN (*) ASA_Dataset.src_ip IN (*) ASA_Dataset.direction="outbound" groupby ASA_Dataset.dest
| iplocation ASA_Dataset.dest
| rename Country as "featureId"
| stats count by featureId
| geom geo_countries featureIdField=featureId
| where isnotnull(geom)
after reloading the page the error disappears