Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Problem with command "map"

$
0
0
Hey guys! So, I am having issues with the command map and was hoping someone can help me with this.. I have a Choropleth Map that displays number of events per country according to a search string. What I am trying to do is: drilldown the country name and the user name (from a multiselect input used to populate the map) once the person clicks on it to a Statistic Table. Problem is, in this table, I am also using the map command. Here is an example of how my search looks like, more or less: index=myindex | iplocation ip_address | search user="$UserDD$" AND Country="$PEC$" | map search="search index=myindex hash=$$hash$$" maxsearches=100 | stats ....." I keep getting the error message "Error in 'map': Did not find value for required attribute 'hash'." I already tried "$hash$", doesn't work.. PS: it works just fine if I put a country name (example: Brazil) and "hash" with only one two $ ("$hash$"). Can anyone please help me? Thank you very much!!

Viewing all articles
Browse latest Browse all 47296

Trending Articles