Chain searches not working on Studio dashboard

Applicability

Description

When using a chain search on the Studio Dashboard is not getting results. 

Resolution

Set up the correct base search for the chain search.

A base search should be a transforming search that returns results formatted as a statistics table. For example, searches using the following commands are transforming searches: stats, chart, timechart, and geostats, among others. For more information on transforming commands, see About transforming commands in the Search Manual.

Non-transforming base searches can cause the following search results and timeout issues. If you observe these issues in a dashboard, check the base search to make sure that it is a transforming search.

No results returned
If the base search is a non-transforming search, you must explicitly state in the base search what fields will be used in the chain search using the | fields command. For example, if your chain search will search for the top-selling buttercup game categories over time, you would use a search command similar to the following.

| fields _time, categoryId, action

Here is the documentation about it.

Related Links

Transforming commands

Chain search/Base search