Dashboards & Visualizations

PARSER: Applying intentions failed Unable to drilldown because of post-reporting 'rangemap' command

alenseb
Communicator

Hi,

I am getting this error while trying to drilldown.
How do i escape this issue as i need to use RangeMap.

This is the code i am using:
sourcetype="Log1" | join type=inner UsrName [SEARCH sourcetype="Log2"] | rangemap field=count green=0-4 blue=5-20 red=21-50 default=red

Please Help.
Thanks!

Tags (2)
1 Solution

MarioM
Motivator

in drilldown rangemap,fieldformat,eval,... cannot be the last search command then you need add another search command ie |stats, |table,...

View solution in original post

MarioM
Motivator

in drilldown rangemap,fieldformat,eval,... cannot be the last search command then you need add another search command ie |stats, |table,...

Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...