3.2 ERROR STRINGS
| MODULE | STRING_NAME | TEXT |
|---|---|---|
| ABSTRACT | ||
| SRANGE_ERROR | invalid value of %s: %ld, valid range: 1-%d | |
| FILE_CLASSIFIER | ||
| TOO_FEW_LINES | Only able to read %lu lines from %s. %lu required to learn a sourcetype. | |
| INVALID_FILE | Invalid file: %s, reason: %s. | |
| ERROR_GETTING_REGEX | Error getting breaking regex for new unknown type: %s. | |
| SJIS | Filename %s looks to be sjis character encoding. Consider specifying 'CHARSET=sjis' | |
| NO_GOOD_REGEX | Unable to get a good breaking regex for new unknown type: %s. | |
| UNKNOWN_UNABLE_TO_CONVERT_TO_UTF8 | An unknown problem is preventing the conversion from character set '%s' to UTF8. Using existing content as is. | |
| FOUND_TIMESTAMP_PREFEX | Found regular timestamp prefix for '%s' with '%s'. | |
| FOUND_REGULAR_TIMESTAMP | Found regular timestamps for '%s' before %d. | |
| INVALID_NOT_LEARNING | Not learning file: '%s'. %s. | |
| NEW_KNOWN_TYPE | Attempting to make new unknown type: %s. Single-line type: %s. | |
| TRAINING | Training on type: %s. | |
| ERROR_GETTING_TYPE | Error getting file type for %s. | |
| CANNOT_OPEN | Unable to open %s. | |
| UNKNOWN_SETTING | Unknown setting %s in source-classifier.conf. | |
| FOUND_GOOD_REGEX | Found good breaking regex (%s) for new sourcetype (%s) created from %s. | |
| UNABLE_TO_CONVERT_TO_UTF8 | Unable to convert character set '%s' to UTF8. Using existing content as is. | |
| NO_SOURCETYPE_FOUND | No sourcetype found for %s. Ignoring. | |
| MAP | ||
| USAGE | Usage: (search="subsearch" | saved_search_name) | |
| VALUE_NOT_FOUND | Did not find value for required attribute %s | |
| NO_SAVED_SPLUNK | Unable to find saved search with name = %s | |
| CANNOT_RUN | Unable to run query (%s) | |
| PAGE | ||
| USAGE_BOUND | Usage: *<lower-bound>-<upper-bound>* <maxresults> [<subpipeline>] | |
| USAGE_MAXRESULTS | Usage: <lower-bound>-<upper-bound> *<maxresults>* [<subpipeline>] | |
| BAD_BOUNDS | Unable to parse lowerbound-upperbound | |
| IN_DISPATCH | The page command cannot be used within a dispatched search. | |
| BAD_BOUNDS_VALUES | Invalid lowerbound, upperbound combination: (%u, %u) | |
| USAGE | Usage: <lower-bound>-<upper-bound> <maxresults> [<subpipeline>] | |
| BAD_MAXRESULTS | Unable to parse maxresults from: '%s'. | |
| USAGE_SUBPIPELINE | Usage: <lower-bound>-<upper-bound> <maxresults> *[<subpipeline>]* | |
| REPORT | ||
| EXPANDED_SQL | Expanded SQL Query: %s | |
| REGEX_PROBLEM | Problem adding regular expression support to SQLite. | |
| NO_COLUMNS | No columns extracted. | |
| ERROR_OPENING | There was an error opening the database. | |
| PROBLEM_RETRIEVING | Exception trying to retrieve result from query. | |
| REST_SEARCH | ||
| JOB_TOUCHED | Search job touched. | |
| UNKNOWN_SID | unknown sid | |
| INVALID_END_TIME | invalid end_time | |
| INVALID_MAX_COUNT | invalid max_count | |
| JOB_FINALIZED | Search job finalized. | |
| INVALID_SEGMENTATION | invalid segmentation | |
| INTERNAL_SERVER_ERROR | internal server error | |
| ONLY_ONE_ACTION | only one action per call allowed | |
| INVALID_TIMEOUT | invalid timeout | |
| JOB_SAVE | Search job saved. | |
| INVALID_TOP_COUNT | invalid top_count | |
| INVALID_ENABLE_EVENTTYPES | invalid enable_eventtypes | |
| INVALID_COUNT | invalid count | |
| PERMISSION_DENIED | permission denied | |
| JOB_UNPAUSED | Search job continued. | |
| INVALID_OFFSET | invalid offset | |
| INVALID_STATUS_BUCKETS | invalid status_buckets | |
| INVALID_QUERY | invalid query | |
| INVALID_OUTPUT_MODE | invalid output mode | |
| INVALID_SHOW_INCOMPLETE | invalid show_incomplete | |
| INVALID_FIELD_LIST | invalid field_list | |
| UNKNOWN_ENDPOINT | unknown endpoint | |
| JOB_CANCELLED | Search job cancelled. | |
| JOB_UNSAVE | Search job unsaved. | |
| INVALID_TIMELINE | invalid timeline | |
| JOB_PAUSED | Search job paused. | |
| INVALID_TIME_FORMAT | invalid time format | |
| INVALID_START_TIME | invalid start_time | |
| MISSING_ACTION | missing action | |
| METHOD_NOTALLOWED | method not allowed | |
| SCRIPT | ||
| INPUT_PIPE_ERROR | Could not create input pipe. | |
| SECURITY_ERROR | Running a script (%s) outside of the secure directory is not allowed. | |
| WRITE_ERROR_NW | Extern write error: nw=0. | |
| USAGE_LANG | Only python and perl scripts are supported. | |
| USAGE_ARG_COUNT | At least one argument is required: <script-name> [<args>]. | |
| SCRIPT_ERROR | Error running %s script: %s | |
| CHILD_ERROR | Could not start child process. | |
| CANNOT_FIND | Cannot find program: %s or script %s. | |
| PIPE_ERROR | Received a pipe error: %d. | |
| WRITE_ERROR | Extern write error: errno=%m. | |
| OUTPUT_PIPE_ERROR | Error setting up output pipe. | |
| NO_SCRIPT_PERMS_S_S | You do not have permission to run the %s script %s. | |
| SET | ||
| USAGE_3 | Three arguments are required: [<search pipeline>] [+(union) | -(diff) | ^(intersect)] [<search pipeline>]. | |
| USAGE_OP | Invalid set operator. Must be either +(union), -(diff), or ^(intersect) | |
| TRANSAM | ||
| WILDCARDS_ONLY_AT_END_OF_NAMES | Wildcards are only supported at the end of transaction names. | |
| BAD_ALIAS | Bad alias with '%s'. Expected format is <attr>=<val>. | |
| BAD_EXCLUSIVE_BOOLEAN | Invalid boolean value '%s' for 'exclusive' field. Defaulting to true. | |
| UNKNOWN_EVENTTYPE | Unknown eventtype '%s'. | |
| UNABLE_TO_FIND_ALIAS | Unable to find alias '%s' in pattern '%s' | |
| UNKNOWN_TRANSACTION | Unknown transaction '%s' | |
| UNSUPPORTED_MATCHTYPE | Unsupported matchtype '%s'. Currently only 'closest' is supported. | |
| UNKNOWN_TRANSACTION_FIELD | Field '%s' does not exist in results and is required for transactions '%s'. |
MADONNA STRINGS
| MODULE | STRING_NAME | TEXT |
|---|---|---|
| ABSTRACT | ||
| SRANGE_ERROR | invalid value of %s: %ld, valid range: 1-%d | |
| ADDINFO | ||
| MISSING_ARGS | Missing arguments. Usage: setfields field1=\"value1\", field2=\"value2\"... | |
| MISSING_DELIM | Missing '=' key-value delimiter. Ignoring token='%s' | |
| MISSING_FIELD_LIST | Missing valid field list. Usage: setfields field1=\"value1\", field2=\"value2\"... | |
| ADMIN | ||
| NOT_EXTERN_PROC | Is not an extern processor. | |
| BAD_PERMISSIONS | Only admins may use the admin operator. | |
| BAD_ARGS | At least 1 argument is required: <section> [arguments]. For example, \"inputs\", or \"statistics\", or \"statistics tail\". | |
| FOUND_EXTERN_PROC | Found extern processor to run. | |
| NULL_SUBPROC | _subProcessor is NULL | |
| INVALID_SECTION | The section \"%s\" is invalid. | |
| ANOMALIES | ||
| BAD_THRESHOLD | Threshold must be between 0 and 1.0 | |
| SILOING_FIELD_NOT_FOUND | A separating field was not found. Carrying on without it. | |
| BAD_COMPRESSION | Compression failed. Aborting search. | |
| BAD_BLACKLIST_THRESHOLD | Blacklist threshold must be between 0 and 1.0 | |
| BAD_MAXVALUES | Maxvalues must be between 10 and 10000 | |
| ANOMVAL | ||
| INVALID_MINSUPFREQ | Invalid value for option 'minsupfreq', must be >= 0 and <= 1.0 | |
| INVALID_PTHRESH | Invalid 'pthresh': must be >= 0.0 and <= 1.0 | |
| INVALID_MINNORMFREQ | Invalid value for option 'minnormfreq', must be >= 0 and <= 1.0 | |
| INVALID_ACTION | Invalid 'action': must be 'filter' (default), 'annotate', or 'summary' | |
| INVALID_MAXANOFREQ | Invalid value for option 'maxanofreq', must be > 0 and <= 1.0 | |
| NO_QUAL_RESULTS | No qualifying results. Please verify field names are correct. | |
| NO_OP_RESULT | No qualifying results, result is a no-op | |
| APPEND | ||
| SUBSEARCH_LASTARG | The last argument must be a subsearch. | |
| ASSOC | ||
| NO_ASSOC_FOUND_1 | No associations found. Consider decreasing the minimum support. | |
| NO_ASSOC_FOUND_2 | No associations found. Consider decreasing the minimum support or the minimum entropy improvement. | |
| COUNT_IS_ZERO | APKeyInfo::isCandidateKey() called with total_count = 0 | |
| BAD_SUPPORT_COUNT | Minimum support count (supcnt) must be > 0 | |
| NO_EVENTS_OR_FIELDS | No events or fields to analyze. | |
| NO_FIELDS | No events contain specified fields. | |
| BAD_FIELD_SIZE | Cannot restrict analysis to a single field | |
| AUDIT | ||
| AUDIT_CHUNK_SIZE | auditedChunk size=%d={%s} | |
| DECRYPT_ERROR | decryption error %s, %s | |
| DECRYPT_CHUNK_SIZE | decryptedChunk size=%d={%s} | |
| BUNDLE | ||
| BAD_ARG_LEN | 1-3 arguments (not %u) are required: <config filename> [<stanza-name> [<attribute-name>]]. For example, 'eventtypes', or 'eventtypes myerror', or 'eventtypes myerror query'. | |
| NO_MATCHES_FOR | No matches for: %s %s | |
| CLUSTER | ||
| BAD_SEED | Random seed must be > 0 | |
| KMEANS_FAIL | k-means clustering failed | |
| BAD_NUM_CLUSTERS | Invalid number of clusters: %s | |
| BAD_FIELD | Cluster number field name cannot be empty string | |
| BAD_THRESHOLD | Invalid threshold: %f | |
| KMEANS_FAIL_FOR | k-means clustering failed for k = %u | |
| BAD_DISTANCE_TYPE | Invalid distance type: %s | |
| BAD_REPS_OR_MAXITER | Invalid reps or maxIter | |
| COMMON | ||
| DUPLICATE_SPLITFIELD | Split by field cannot be repeated: %s | |
| BAD_OUT_ZERO_COUNT | Corrupt output from pretop or prerare (zero count) | |
| DUPLICATE_FIELD | Field specified multiple times: %s | |
| EMPTY_SPLITFIELDS | Field(s) to split on expected after 'by' keyword | |
| HIGH_LIMIT | limit must be <= %lu | |
| BAD_OUT_MISSING_SPLIT | Corrupt output from pretop or prerare (missing split by fields) | |
| BAD_OUT_MISSING_FIELDS | Corrupt output from pretop or prerare (missing fields) | |
| NO_FIELDS | No fields specified | |
| PCT_FIELD_CONFLICT | Output percent field conflicts with input field '%s', use 'percentfield' option to specify a different name. | |
| BAD_FIELD_NAMES | Output count field cannot have same name as output percent field | |
| CNT_FIELD_CONFLICT | Output count field conflicts with input field '%s', use 'countfield' option to specify a different name. | |
| CONFIGMKV | ||
| MISSING_VALID_CONFIG | FAILED to find valid config for multikv stanza = | |
| MISSING_CONF_FILE | FAILED to find multikv.conf configuration file. | |
| CONTINGENCY | ||
| BAD_ROW_COL_FIELDS | Must specify valid and distinct row and column fields | |
| CORRUPT_TABLE_DATA | Corrupt data from pre-ctable, '%s' field not numerical | |
| BAD_ROW_COL_MIN_VALS | min row and col covers must be > 0.0 and <= 1.0 | |
| ROW_COL_NOT_FOUND | Row '%s' and/or col '%s' fields not found in results | |
| BAD_OPT_VAL | Value of option '%s' must be <= %lu | |
| CONTINUITY | ||
| INVALID_OPT_VAL | Invalid value for option %s: '%s' | |
| NUMERICAL_INSTABILITY | Potential numerical stability issue given value range. Aborting makecontinuous. | |
| TOO_MANY_ROWS | Too many rows would be created (> %lu) | |
| VAL_GT_VAL | %s value '%s' must be > %s value '%s' | |
| DUP_VALS_DETECTED | Duplicate values in field '%s' detected. | |
| MULTI_FILE_UNSUPPORTED | Multi-file input unsupported, operating on in memory results only | |
| MKTIME_ERROR | mktime() error, tl_advance() returned -1, tscale: %s, origspan: %lu | |
| CONVERSION | ||
| INVALID_CONV_TYPE | Invalid conversion type: %s | |
| FILLPATTERN_FAIL | Could not fill rename pattern '%s' using field '%s' (matched wildcard '%s') | |
| MULTIPLE_FIELD_SPEC | Field '%s' specified multiple times | |
| INVALID_ARGUMENT | Invalid argument '%s' | |
| INVALID_CONV_SPECIFIER | Invalid conversion specifier, must be convert_type(key) | |
| INVALID_FIELD_NAME | Invalid field name '%s' | |
| INVALID_TIMEFORMAT | Invalid timeformat '%s' | |
| WILDCARD_MISMATCH | Wildcards mismatch between key specifier and rename specifier | |
| INVALID_WILDCARD | Invalid wildcard specifier (contains consecutive * chars): '%s' | |
| COPYRESULTS | ||
| EMPTY_SEARCH_ID | Empty search id is not valid | |
| COPY_FAILED | Failed to copy results of search_id=%s to path=%s | |
| NO_DESTINATION_FILE | No destination file provided | |
| CANNOT_FIND_JOB | Could not find a job with search_id=%s | |
| INVALID_APPLICATION | Destination application does not exist, application=%s | |
| CANNOT_FIND_RESULTS | Could not find results for search_id=%s | |
| APP_PERMISSION_DENIED | Permission denied. You do not have sufficient privileges to write to application=%s | |
| INVALID_FILE_LOCATION | Invalid destination file name. Can only write '.csv' files to 'etc/system/lookups/' or 'etc/apps/<app-name>/lookups/' | |
| PERMISSION_DENIED | Permission denied. Cannot access contents of job with search_id=%s | |
| CORRELATION | ||
| MULTIPLE_FIELD_SPEC | Field '%s' specified multiple times | |
| NO_QUAL_FIELDS | No qualifying fields exist in the data | |
| INVALID_CORR_TYPE | Invalid correlation type: %s | |
| SINGLE_FIELD | Cannot correlate based on a single field | |
| DEDUP | ||
| INVALID_LIMIT | Invalid limit option, must be >= 1 | |
| MULTIPLE_FIELD_SPEC | Field '%s' specified multiple times | |
| MISSING_FIELDS | At least one field must be given as an argument. | |
| EMPTY_SORTBY_FIELD | Invalid empty sortby field name | |
| SORTBY_NOT_FOR_PREDEDUP | sortby clause not for prededup | |
| DISCRETIZATION | ||
| INVALID_OPT_VAL | Invalid value for option %s '%s' | |
| MISSING_FIELD | Must specify field to discretize | |
| INVALID_NUM_SPAN | Invalid numerical span '%s', must be > 0 | |
| MISSING_FIELD | Field '%s' does not exist in the data | |
| FAILED_VAL_FIELD | Failed to discretize value '%s' of field '%s' | |
| INVALID_NUM_BINS | Number of bins must be >= 2 and <= %lu | |
| NOT_NUMERICAL_FIELD | Field '%s' has no numerical values | |
| TOO_MANY_BINS | Span value '%s' would result in too many (> %lu) bins. Edit limits.conf to change limits. | |
| VAL_GTE_VAL | %s value must be >= %s value | |
| EXPECTED_FIELD | Expected field name after '%s' | |
| DISPATCHCOMM | ||
| FAILED_SETUP_STDIN | Failed to setup the stdin communication channel to remote process. | |
| INSUFFICENT_PRIV | This user %s does not have the correct capability to search. | |
| INVALID_MAXRESULTS | Option 'maxresults' must have value > 0 | |
| FAILED_CREATE_DIR | Failed to create a directory at %s. | |
| FAILED_CONN_TO | Failed to connect to %s | |
| INVALID_ID | invalid value of id: ..%s not allowed | |
| FAILED_CONN_STATUS | Failed to connect with url = %s because of %s status code = %d | |
| PREV_GEN_FAIL | Failed generating preview results: %s | |
| RES_PROV_LOCAL_FAIL | Failed to create result provider for local peer with stream = %s | |
| URI_NOT_RESPONDING | Attempted to send query via invokeAPI: %s not responding | |
| FIRST_COMMAND | This command must be the first command of a search | |
| FAILED_CONN_HSE | Failed to connect with url = %s because of %s | |
| USAGE | Usage: dispatch [options] [remoteserverlist] '['<subpipeline>']' | |
| NO_USER_CONTEXT | No user context set. Cannot run search | |
| NOT_LOGGED_IN | User not logged in. | |
| AUDIT_STR_S_S_D_D_D_D_S_S | Dispatch search='%s' autojoin='%s' buckets=%ld ttl=%ld max_count=%ld maxtime=%ld enable_lookups='%s' extra_fields='%s' | |
| FAILED_WRITE_INFO | Failed to write the info file to %s. | |
| COMMAND_ORDER_ERROR | This command expects events in descending time order and therefore cannot be invoked after the '%s' command | |
| RES_PROV_REM_FAIL | Failed to create result provider for remote peer %s at uri %s with stream = %s | |
| INVALID_TTL | Option 'ttl' must have value > 0 | |
| FAILED_TO_START_PROC | Failed to start the search process. | |
| EVAL | ||
| MISSING_ARGS | Missing arguments. usage: eval dest_key = expression | |
| INVALID_UNARY_OP | Malformed expression - Invalid unary op | |
| INVALID_FUNC_ARGS | Invalid arguments to '%s' function | |
| MISSING_OR | Malformed expression - Missing OR term | |
| BAD_FUNC | Unsupported Function: %s | |
| INVALID_NUMBER | Invalid number: %s | |
| TYPE_FAIL_PLUS | Typechecking failed. '+' only takes two strings or two numbers | |
| MISSING_COMP_TERM | Malformed expression - Missing comparison term | |
| TYPE_FAIL_BOOL | Typechecking failed. '%s' only takes boolean arguments | |
| TYPE_FAIL_NUM | Typechecking failed. '%s' only takes numbers | |
| MATCH_FAIL | Malformed expression - %c expected | |
| TYPE_FAIL_DIFF | Typechecking failed. '%s' operator received different types | |
| MISSING_FACTOR | Malformed expression - Missing factor | |
| CONSUME_FAIL | Malformed expression - %s expected | |
| INVALID_DEST | Invalid destination key | |
| BOOLEAN_RESULT | The result of an expression cannot be boolean. Try if([bool expr], [expr], [expr]) | |
| BAD_DEST_BRACKETS | Invalid destination field. {} brackets must be closed | |
| UNEXPECTED_CHAR | Malformed expression - Unexpected character hit in factor: %c | |
| MISSING_AND | Malformed expression - Missing AND term | |
| FAILED_PARSE | Failed to parse arguments. eval usage: eval dest_key = expression | |
| TYPE_FAIL_CONCAT | Typechecking failed. '.' operator only takes strings and numbers | |
| INVALID_OP | Invalid operator at '%s' | |
| MISSING_TERM | Malformed expression - Missing term | |
| EXTERN | ||
| GETINFO_FAILED | script getinfo probe failed, script=\"%s\" | |
| SCRIPT_NO_SESSION | a session was required for '%s', but no valid session could be found. | |
| INVALID_COMMAND | External search command '%s' does not exist in commands.conf | |
| TIMEORDER_FAIL | External search command '%s' did not return events in descending time order, which was expected. | |
| SCRIPT_EX_FAILED | script execution failed, script=\"%s\" | |
| INVALID_TYPE | Invalid TYPE '%s' for command '%s' in commands.conf | |
| FILE_CLASSIFIER | ||
| TOO_FEW_LINES | Only able to read %lu lines from %s. %lu required to learn a sourcetype. | |
| INVALID_FILE | Invalid file: %s, reason: %s. | |
| ERROR_GETTING_REGEX | Error getting breaking regex for new unknown type: %s. | |
| SJIS | Filename %s looks to be sjis character encoding. Consider specifying 'CHARSET=sjis' | |
| NO_GOOD_REGEX | Unable to get a good breaking regex for new unknown type: %s. | |
| UNKNOWN_UNABLE_TO_CONVERT_TO_UTF8 | An unknown problem is preventing the conversion from character set '%s' to UTF8. Using existing content as is. | |
| FOUND_TIMESTAMP_PREFEX | Found regular timestamp prefix for '%s' with '%s'. | |
| FOUND_REGULAR_TIMESTAMP | Found regular timestamps for '%s' before %d. | |
| INVALID_NOT_LEARNING | Not learning file: '%s'. %s. | |
| NEW_KNOWN_TYPE | Attempting to make new unknown type: %s. Single-line type: %s. | |
| TRAINING | Training on type: %s. | |
| ERROR_GETTING_TYPE | Error getting file type for %s. | |
| CANNOT_OPEN | Unable to open %s. | |
| UNKNOWN_SETTING | Unknown setting %s in source-classifier.conf. | |
| FOUND_GOOD_REGEX | Found good breaking regex (%s) for new sourcetype (%s) created from %s. | |
| UNABLE_TO_CONVERT_TO_UTF8 | Unable to convert character set '%s' to UTF8. Using existing content as is. | |
| NO_SOURCETYPE_FOUND | No sourcetype found for %s. Ignoring. | |
| FILLNULL | ||
| EMPTY_FIELD | Field name cannot be empty strings | |
| FILE_READ_ERROR | Could not read file: '%s' | |
| MULTI_FIELD_SPEC | Field '%s' specified multiple times | |
| FOLDERIZE | ||
| BAD_COUNT_ON_ATTR | Folderize encountered a bad count value '%s' on attribute '%s'. | |
| ATTR_REQUIRED | Folderize requires an 'attr' value. | |
| FORMAT | ||
| LOWERFIELD_EMPTY | 'lowerfield' cannot be empty | |
| TOO_MANY_RESULTS | Invalid 'maxresults' value out of range (0 and %lu) | |
| BAD_ARGS | '<resultstart> <colstart> <colseparator> <colend> <rowseparator> <resultend>' arguments must be specified together or not at all. | |
| ONLY_FIRST_MAXRESULTS | Only first maxresult results will be used | |
| FIELD_EMPTY | 'field' cannot be empty | |
| UPPERFIELD_EMPTY | 'upperfield' cannot be empty | |
| HEAD | ||
| BOOLEAN_EXPR | Argument must be a positive number or a boolean expression | |
| NUM_RESULTS_MUST_BE_POS | Number of results must be a positive number. | |
| HTTPSTREAM | ||
| CONN_TIMEOUT | connection timed out: host=%s\n | |
| RESOLVE_ADDR_FAIL | unable to resolve address: host=%s\n | |
| URI_PARSE_FAIL | uri parsing failure: uri=%s | |
| REQ_WRITE_FAIL | error writing request: uri=%s | |
| CONN_ERROR | connection error: host=%s\n | |
| INPUTCSV | ||
| FILE_OPEN_FAIL | Unable to open file='%s' error='%m' | |
| LOOKUP_READ | Successfully read lookup file '%s' | |
| INVALID_LOOKUP_FILE | Unable to read lookup file '%s' | |
| INVALID_LOOKUP_TABLE | Invalid lookup table '%s' | |
| INVALID_FILE_READ | Reading a file (%s) outside of the secure directory is not allowed. | |
| INVALID_MAX | Invalid 'max' option value out of range, must be between 1 and %lu | |
| INVALID_FILENAME | '%s' is not a valid filename. | |
| INVALID_OPTION | Invalid option argument: %s | |
| USAGE | usage: %s [chunk=<bool>] <filename> | |
| FAILED_CREATING_DIR | Unable to create temporary directory (%lu retries). | |
| FILE_READ_FAIL | File (%s) could not be opened for reading. | |
| INVALID_START | Invalid 'start' option value, must be < %lu | |
| NOT_A_FILE | '%s' is not a file. | |
| NO_FILES | Input file missing. | |
| JOIN | ||
| USAGE | USAGE: join <options> (<join-fields>)? [subsearch] | |
| UNSPECIFIED_FIELDS | Field(s) to selfjoin on unspecified. %s | |
| SORT_ERROR | Internal error sorting results. | |
| KVFORM | ||
| KVFORM_EMPTY_FORM | Empty form '%s' | |
| UNKNOWN_FORM | Unknown form '%s' | |
| KVTRANS | ||
| PARSE_INIT_FAIL | Failed to properly initialize kv parser for transform_name='%s'. At least one delimiter must be defined. | |
| INVALID_TRANSFORM | Error: invalid transform. Regex has no capturing groups while FORMAT has references. transform_name='%s' | |
| RE_COMPILE_FAIL | Cannot compile RE \"%s\" for transform_name='%s': %s | |
| PARSE_KV_FAIL | Failed to parse key-value pair config: transform_name='%s' | |
| LOADJOB | ||
| NO_ARTIFACTS_TIMERANGE | Cannot find any artifacts within the search time range for savedsearch_ident="%s" | |
| JOB_HAS_NO_EVENTS | There are no events in the artifacts of job: job_id="%s" | |
| NOT_DONE_YET | Artifacts not available. Job not done yet: job_id="%s" | |
| CANNOT_FIND_JOB | Cannot find job, job_id="%s" | |
| NO_ARTIFACTS | Could not find any artifacts for savedsearch_ident="%s" | |
| INVALID_SAVEDSEARCH | Invalid savedsearch argument format. Expecting: "%s" | |
| PERMISSION | Permission denied. Cannot access artifacts of job: job_id="%s" | |
| LOCALIZE | ||
| OUTOFTIMEORDER | Results must be in ascending or descending order. | |
| MAP | ||
| USAGE | Usage: (search="subsearch" | saved_search_name) | |
| VALUE_NOT_FOUND | Did not find value for required attribute %s | |
| NO_SAVED_SPLUNK | Unable to find saved search with name = %s | |
| CANNOT_RUN | Unable to run query (%s) | |
| MKVTRANSFORM | ||
| INVALID_FORCEHEADER | Invalid forceheader, must be >= 1 | |
| INVALID_ARGUMENT | Invalid argument '%s' | |
| INVALID_MAXNEWRESULTS | Invalid maxnewresults, must be >= 1 | |
| INVALID_MAX_HEADER_LINE | Invalid max_header_line, must be >= 1 | |
| INVALID_LAST_LINE | Invalid last_line, must be >= 1 and > start_line | |
| INVALID_OPTION | Invalid option '%s' | |
| INVALID_MAX_HEADER_LHD | Invalid max_header_lookahead, must be >= 1 | |
| INVALID_START_LINE | Invalid start_line, must be >= 1 | |
| KEYWORD_SPEC_FAIL | %s keyword must be specified only once | |
| MULTIKVTEST | ||
| INVALID_OPTION | Invalid option argument: \"%s\"\n | |
| INVALID_FILE | Invalid file: %s\n | |
| USAGE | USAGE: %s <FILE> [options]\n | |
| MULTIVALUE | ||
| BAD_TOKENIZER_REGEX | Invalid tokenizer regular expression | |
| MISSING_FIELD_NAME | Field name expected | |
| FIELD_NOT_IN_DATA | Field '%s' does not exist in data. | |
| EMPTY_DELIMITER | Delimiter cannot be empty string | |
| OPTION_CONFLICT | Cannot specify both delim and tokenizer options | |
| NEWCHART | ||
| EXPECTED_X_AFTER | Expected x-axis field after '%s' keyword | |
| EVAL_REQ_SPLITBY | Complex eval expression only supported when a split-by field is specified | |
| EXPECTED_SPLITBY | Expected splitby field | |
| CANNOT_BE_EMPTY | %s cannot be empty string. | |
| INVALID_FIELDNAME | Invalid field name: '%s' | |
| INVALID_SUBEVAL | Invalid dynamically evaled field expression '%s', 'eval(...)' must have a single expression as argument. | |
| MALFORMED_FIELD | Malformed data field: '%s' | |
| EVAL_NOPER | No per_* aggregators allowed in eval expression '%s' | |
| EMPTY_SPLITBY | splitby field cannot have empty name | |
| RENAME_CONFLICT | Specifier '%s' specified multiple times and renamed to conflicting field names | |
| MISSING_FIELDS | Must specify data field(s) to chart. | |
| EXPECTED_X_AXIS | Expected x-axis field | |
| INVALID_AGG | Invalid series aggregator function '%s' | |
| NO_MULTI_FIELDS | Only single functions applied to a non-wildcarded data field is allowed when specifying a split by field | |
| INVALID_ARGUMENT | Invalid argument: '%s' | |
| EVAL_DIRECTFIELD | Only the splitby and x-axis fields can be directly referenced in the eval expression | |
| EVAL_REQ_RENAME | With no split-by field, eval expression '%s' requires a rename to be specified | |
| INVALID_SPECIFIER | Invalid specifier '%s'; must be in form <func>(<field>). For example: max(size) | |
| EMPTY_X_AXIS | x-axis field must not be empty | |
| EVAL_ERROR | Error '%s' while parsing eval expression | |
| NEWSERIES | ||
| INVALID_AGGREGATOR | Invalid aggregator field: '%s' | |
| INVALID_CRITERIA | Invalid criteria: '%s' | |
| INVALID_THRESHOLD | Invalid numerical threshold: '%s' | |
| INVALID_COMP | Invalid comparator: '%s' | |
| SETMV_FAIL | setMultiValues() error on '%s' field. | |
| INVALID_USAGE | Invalid usage, expected: %s <xfield> <seriesfield> <aggregator> <comp> <criteria> [options] | |
| INVALID_USAGE | Invalid usage | |
| OLDEVAL | ||
| MISSING_ARGS | Eval arguments missing. eval usage: eval dest_key = expression | |
| QUERY_PREP_FAILED | Query preparation failed for: '%s' | |
| DB_ERROR | There was an error opening the database: | |
| INVALID_EXPRESSION | Invalid eval expression | |
| PARSE_FAIL | Failed to parse arguments. eval usage: eval dest_key = expression | |
| EMPTY_EXPRESSION | Empty expression is not allowed. | |
| OUTLIER | ||
| MULTI_FIELD_SPEC | Field '%s' specified multiple times | |
| INVALID_OPTION | Invalid option to %s: '%s' | |
| INVALID_ACTION | Invalid outlierfilter action: '%s' | |
| INVALID_TYPE | Invalid outlierfilter type: '%s' | |
| INVALID_PARAM | Invalid outlierfilter param value: %f | |
| OUTPUTCSV | ||
| WRITE_FILE_FAIL | Could not write to file (%s). | |
| HEADER_READ_FAIL | Error reading internal file header: %s | |
| NOLOOKUPNAME | Lookup table name or file name required | |
| DOTS_IN_FILENAME | Filenames may not contain '..' | |
| INVALID_FILENAME | Invalid file name '%s' | |
| CREATE_DIR_FAIL | Could not create directory for multi-file output (%s). | |
| CREATEDIR_FAIL | Failed to create directory '%s' | |
| WRITE_RESULT_FAIL | Could not write to result file (%s). | |
| PAGE | ||
| USAGE_BOUND | Usage: *<lower-bound>-<upper-bound>* <maxresults> [<subpipeline>] | |
| USAGE_MAXRESULTS | Usage: <lower-bound>-<upper-bound> *<maxresults>* [<subpipeline>] | |
| BAD_BOUNDS | Unable to parse lowerbound-upperbound | |
| IN_DISPATCH | The page command cannot be used within a dispatched search. | |
| HIGH_MAXRESULTS | maxresults must be <= 500000000 | |
| BAD_BOUNDS_VALUES | Invalid lowerbound, upperbound combination: (%u, %u) | |
| USAGE | Usage: <lower-bound>-<upper-bound> <maxresults> [<subpipeline>] | |
| BAD_MAXRESULTS | Unable to parse maxresults from: '%s'. | |
| USAGE_SUBPIPELINE | Usage: <lower-bound>-<upper-bound> <maxresults> *[<subpipeline>]* | |
| REGEX | ||
| USAGE | usage: regex <field> (=|!=) <regex> | |
| INVALID_REGEX | Invalid regex '%s': %s | |
| RENAME | ||
| USAGE | USAGE: rename [old_name AS/TO/-> new_name]+ | |
| WILDCARD_MISMATCH | Wildcard mismatch: '%s' as '%s' | |
| INVALID_FIELDNAME | Invalid field name '%s' | |
| REPLACE | ||
| USAGE | USAGE: replace [orig_str WITH new_str]+ [IN field1, field2, ...] | |
| WC_UNMATCHED_STARS | Wildcards and their replacements must have matching number of * characters | |
| WC_CONSEC_STARS | Wildcards may not have consecutive * characters | |
| REPORT | ||
| REGEX_PROBLEM | Problem adding regular expression support to SQLite. | |
| NO_COLUMNS | No columns extracted. | |
| ERROR_OPENING | There was an error opening the database. | |
| EXPANDED_SQL | Expanded SQL Query: %s | |
| ERROR_MIDDLE | with sql create statement: | |
| EXEC_ERROR | %s. Attempted to execute '%s'. | |
| PROBLEM_RETRIEVING | Exception trying to retrieve result from query. | |
| SQL_QUERY_ERROR | There was an error with the sql query: | |
| REST_SEARCH | ||
| INVALID_ID | invalid id | |
| MISSING_ACTION | missing action | |
| UNKNOWN_ENDPOINT | unknown endpoint | |
| INVALID_RANGE | invalid time range | |
| UNKNOWN_SID | unknown sid | |
| INVALID_END_TIME | invalid end_time | |
| MISSING_TTL | missing ttl argument for ttl action | |
| JOB_FINALIZED | Search job finalized. | |
| JOB_SAVED | Search job saved. | |
| INVALID_TIMERANGE | invalid timerange | |
| INVALID_LATEST_TIME | invalid latest_time: latest_time must be after earliest_time | |
| INVALID_MAX_COUNT | invalid max_count | |
| INVALID_MIN_FREQ | invalid min_freq | |
| INVALID_ENABLE_LOOKUPS | invalid enable_lookups | |
| INVALID_EARLIEST_TIME | invalid earliest_time | |
| UNKNOWN_ACTION | unknown action | |
| INVALID_MAX_TIME | invalid max_time | |
| NO_SUMMARY_AVAILABLE | No summary available for this job. | |
| INVALID_SEGMENTATION | invalid segmentation | |
| INVALID_OUTPUT_TIME_FORMAT | invalid output time format | |
| ONLY_ONE_ACTION | only one action per call allowed | |
| INVALID_TIMEOUT | invalid timeout | |
| INVALID_TOP_COUNT | invalid top_count | |
| INVALID_START_TIME | invalid start_time | |
| JOB_UNSAVE | Search job unsaved. | |
| MISSING_PRIORITY | missing priority for set priority action | |
| PERMISSION_DENIED | permission denied | |
| JOB_GENPREVIEWOFF | Search job results preview disabled. | |
| INVALID_CREATE_PROCESS | invalid spawn_process | |
| JOB_UNPAUSED | Search job continued. | |
| JOB_PAUSED | Search job paused. | |
| ZOMBIE_PROCESS | Search job terminated unexpectedly | |
| INVALID_OFFSET | invalid offset | |
| INVALID_STATUS_BUCKETS | invalid status_buckets | |
| INVALID_QUERY | invalid query | |
| INVALID_EXEC_MODE | invalid exec_mode | |
| INVALID_NOW | invalid now | |
| INVALID_OUTPUT_MODE | invalid output mode | |
| STATUS_READ_FAILED | Unable to read job status | |
| EMPTY_SEARCH | empty search | |
| INVALID_SHOW_INCOMPLETE | invalid show_incomplete | |
| CHANGED_PRIORITY | Search job's priority was changed to: %lu | |
| INVALID_MAX_LINES | invalid max_lines | |
| INVALID_FIELD_LIST | invalid field_list | |
| INVALID_MESSAGE_LEVEL | invalid message_level | |
| JOB_CANCELLED | Search job cancelled. | |
| INVALID_COUNT | invalid count | |
| METHOD_NOTALLOWED | method not allowed | |
| JOB_TOUCHED | Search job touched. | |
| INVALID_RELOAD_MACROS | invalid reload_macros | |
| INVALID_TIME | invalid time | |
| INVALID_TIME_FORMAT | invalid time format | |
| INVALID_TIMELINE | invalid timeline | |
| INVALID_REDUCE_FREQ | invalid reduce_freq | |
| CHANGED_TTL | Search job's ttl was changed to: %lu | |
| INVALID_TTL | ttl should be a positive integer: %s | |
| INVALID_PARSEONLY | invalid parse_only | |
| INVALID_TRUNCATION_MODE | invalid truncation_mode | |
| BAD_PRIORITY | priority should be in the following range: [0-10] | |
| JOB_GENPREVIEWON | Search job results preview enabled. | |
| INTERNAL_SERVER_ERROR | internal server error | |
| REST_TYPEAHEAD | ||
| INVALID_EARLIEST_TIME | invalid earliest_time | |
| INVALID_LATEST_TIME | invalid latest_time: latest_time must be after earliest_time | |
| INVALID_TIME_FORMAT | invalid time format | |
| REX | ||
| USAGE | usage: regex [field=<field>] <regex> | |
| BAR_REGEX | Error while compiling the regex '%s': %s | |
| BAD_REGEX | The regex '%s' will not extract anything. It should specify at least one named group, format: (?<name>...). | |
| SAMPLES | ||
| SILOING_FIELD_NOT_FOUND | 'by' fields not found in results | |
| BAD_RESAMPLE | resample size must be between 1 and %ld | |
| TOO_MANY_SAMPLES | Too many samples needed. Reduce the sample size or choose a 'by' clause with fewer unique values. | |
| BAD_MAXSAMPLES | Sample size must be between 1 and %ld | |
| SAVEDSEARCH | ||
| CONTEXT_ERROR | <error>Unable to get thread user context.</error> | |
| INVALID_ARGUMENTS | This processor takes no arguments (received %u: %s). | |
| SAVEDSPLUNK | ||
| CANNOT_FIND | Unable to find saved splunk with name = %s | |
| USAGE | usage: %s <name> [options] | |
| ERROR_BUILDING | Error while building search for saved search '%s'. %s | |
| SCRIPT | ||
| INPUT_PIPE_ERROR | Could not create input pipe. | |
| SECURITY_ERROR | Running a script (%s) outside of the secure directory is not allowed. | |
| WRITE_ERROR_NW | Extern write error: nw=0. | |
| USAGE_LANG | Only python and perl scripts are supported. | |
| USAGE_ARG_COUNT | At least one argument is required: <script-name> [<args>]. | |
| SCRIPT_ERROR | Error running %s script: %s | |
| OUTPUT_PIPE_ERROR | Error setting up output pipe. | |
| CHILD_ERROR | Could not start child process. | |
| CANNOT_FIND | Cannot find program: %s or script %s. You might not have permission to see this command. | |
| PIPE_ERROR | Received a pipe error: %d. | |
| WRITE_ERROR | Extern write error: errno=%m. | |
| NO_SCRIPT_PERMS | You do not have permission to run the %s script %s. | |
| SEARCHFACT | ||
| UNKNOWN_OP | Unknown search operation: %s. You might not have permission to run this operator. | |
| SEARCHPARSER | ||
| UNBALANCED_QUOTES | Unbalanced quotes | |
| MISSING_CLOSETICK | Missing closing tick mark for macro expansion | |
| MACRODEF_NOARGLIST | Argment list missing for macro '%s', expected in '%s' conf key | |
| INVALID_MACRO_EXPR | Invalid macro expression `%s`: %s | |
| INVALID_MACRO_NOCLOSE | Invalid macro expression `%s`: expected closing ')' | |
| MISMATCHED_CLOSEBRACKET | Mismatched ']' | |
| MACRO_PAREN | Mismatched parens in macro argument expression '%s' | |
| SUBSEARCH_CMDARG | Subsearches are only valid as arguments to commands | |
| MISSING_SEARCHCMD | Missing search command before: '%c' | |
| INFINITE_RECURSION | Infinite recursion detected during macro expansion of `%s` | |
| INVALID_MACRO_PARTIALNAME | Invalid macro expression `%s`: either all arguments must be named or none can be named | |
| TRAILING_ESCAPE | Invalid trailing escape character. | |
| MISMATCHED_OPENBRACKET | Mismatched '[' | |
| MACRODEF_NOT_FOUND | No macro '%s' that takes %s arguments, expecting stanza name '%s' | |
| INVALID_NAME | Invalid name '%s': macro and argument names may only include alphanumerics, '_' and '-' | |
| MACRODEF_ARGNUM | Invalid argument list for macro '%s': expected %s elements | |
| EMPTY_NAME | Macro and argument names may not be empty | |
| MACRO_PAREN_END | Error in macro argument expression '%s': arguments that start with '(' must end with ')' | |
| VALIDATION_INVALID | Invalid validation expression '%s' | |
| INVOKE_ARG_MISMATCH | Invalid macro expression `%s` : Argument list does not match definition | |
| MACRO_EVALFAIL | Definition of '%s' expected to be an eval expression that returns a string | |
| MACRODEF_NOT_FOUND_ARGS | Unable to find definition for macro '%s', expected in '%s' conf key | |
| INVALID_MACRO_EMPTY_NAME | Invalid macro expression `%s`: empty macro name | |
| MACRODEF_ARGLIST_IGNORED | '%s' does not expect any arguments, ignoring '%s' conf key | |
| EMPTY_MACRO_EXPR | Empty macro expression | |
| MACRODEF_REPEATARG | Invalid argument list for macro '%s': constains repeated names | |
| VALIDATION_FAIL | Error validating macro `%s`: %s | |
| SEARCHPIPE | ||
| UNKNOWN_EXEC_EXCPT | Unknown exception executing command: '%s' | |
| UNKNOWN_ARG_EXCPT | Unknown exception evaluating arguments for command: '%s' | |
| SEARCHPIPECONT | ||
| CANNOT_FIND_PID | unable to find pid: %s | |
| MULTIPLE_STARTS | Search pipeline: %s started multiple times | |
| SEARCHPROC | ||
| EMPTY_FIELDNAME | Field names must not be empty strings | |
| INVALID_OPT_VAL | Invalid %s value for option '%s' | |
| UNKNOWN_SUBSEARCH_FAIL | Unknown subsearch failure | |
| MULTIPLE_FIELD_SPEC | Field '%s' specified multiple times | |
| TIMEOUT | Timed out (%lu secs) waiting for subsearch results. | |
| MULTIPLE_OPT_SPEC | Option '%s' specified more than once | |
| INVALID_OPTION | Invalid option '%s' | |
| SEARCHREST | ||
| NAME_NOT_FOUND | name %s not found in searchMap - configuration error | |
| MATCH_REGEX_ERROR | 'match' regex error for stanza %s = %s | |
| CONFIG_ERROR | configuration error, %s does not have a 'match' or 'searchstring' tag - skipping | |
| SEARCHRESULTS | ||
| INVALID_INDEX | Invalid index into SearchResult. | |
| CREATE_TMP_FILE_FAIL | Unable to create or write to temporary file (%s). | |
| ERROR_READING_FILE | Error reading file: %s | |
| GZOPEN_FAIL | Unable to ::gzopen() temporary file for writing (%s) | |
| SPLITFILE_WRITE_FAIL | Could not write to new file in splitFile(): %s | |
| PARSE_ERROR | Unable to parse %s | |
| CSV_HEADER_PARSE_FAIL | Unexpected error parsing csv header. | |
| RETRY_WRITE_FAIL | Unable to write to file (%s). Retried %lu times, period = %lu ms. error='%m' | |
| MISSING_RESULTS_INFO | Unable to find results info CSV at %s | |
| FILE_WRITE_FAIL | Could not write to file: %s | |
| GZWRITE_ERROR | gzwrite error: %m | |
| SET | ||
| USAGE_3 | Three arguments are required: [<search pipeline>] [+(union) | -(diff) | ^(intersect)] [<search pipeline>]. | |
| USAGE_OP | Invalid set operator. Must be either +(union), -(diff), or ^(intersect) | |
| SLOGCLUSTER | ||
| BAD_THRESHOLD | Threshold must be > 0.0 and < 1.0. | |
| EMPTY_COUNTFIELD | countfield name must not be empty. | |
| EMPTY_LABELFIELD | labelfield name must not be empty. | |
| UNKNOWN_MATCHTYPE | Unknown 'match' type. Valid values are 'termlist', 'termset', and 'ngramset'. | |
| SORT | ||
| WRITE_FILE_FAIL | Could not write to file: %s. | |
| OPEN_FILE_FAIL | Could not open/create file for writing (%s). | |
| MISMATCHED_PARENS | Mismatched parenthesis in field specifier: '%s'. | |
| MISSING_FIELDS | No fields to sort have been specified. | |
| READ_HEADER_FAIL | Failure reading header for internal file: %s. | |
| EMPTY_ARGUMENT | Invalid empty string argument. | |
| EMPTY_FIELDNAME | Invalid empty field name in argument: '%s'. | |
| RENAME_FILE_FAIL | Failed to rename file (%s) to (%s). | |
| STATISTICS | ||
| TOO_MANY_ARGS | At most one optional argument, a processor name, may be supplied. For example, 'exec', 'tail', or 'tcp'. | |
| STATS | ||
| MULTI_FUNC_RENAME | Cannot specify a rename for multi-function specifiers ('all' or 'default') | |
| INVALID_EVAL | Invalid eval expression for dynamic field '%s', error = '%s' | |
| INVALID_EVAL_FIELD_SPEC | Invalid dynamically evaluated field specifier: '%s', must be non-empty, start with '{' and end with '}' | |
| INVALID_WINSIZE | Invalid streaming window size %lu (maximum size = %lu) | |
| INVALID_RENAME | Invalid rename value | |
| INVALID_ARGUMENT | Invalid argument: '%s' | |
| MISSING_FIELDS_AFTER_BY | Must specify at least one field after 'by' | |
| NAME_CONFLICT | Output field '%s' cannot have the same name as a group by field. | |
| NO_EVENTS_FOUND | No events found containing field(s): %s | |
| MISSING_FIELD_AFTER_AS | Must specify a field name after 'as' | |
| EVAL_FIELD_REQUIRES_RENAME | Rename required for aggregation specifier on a dynamically evaluated field: '%s' | |
| INVALID_WILDCARD | Invalid wildcard field, contains consecutive wildcards | |
| PRESTATS_ERROR | Corrupt information from pre-stats: | |
| INVALID_AGG_SPEC | Invalid aggregation specifier: '%s', must be [func_name]([key]) | |
| REPEAT_BYFIELD | Repeated group by field '%s' | |
| BAD_PERCENTILE | Percentile must be integer >= 1 and <= 99 | |
| EVAL_NOMULTIFUNC | Multi-function specifiers ('all' or 'default') cannot be used with dynamically evaluated fields | |
| BAD_NUM_WILDCARDS | Number of wildcards does not match between field specifier '%s' and rename specifier '%s'. Note: empty field specifiers implies all fields, e.g. sum() == sum(*) | |
| STRCONCAT | ||
| INVALID_ARGUMENT | Invalid argument: '%s' | |
| BAD_LAST_FIELD | Last field must be the destination field name | |
| EMPTY_FIELD | Fields cannot be empty string | |
| TOO_FEW_ARGS | Not enough fields, USAGE: %s srcfield1 srcfield2 ... srcfieldn dest_field | |
| STREAMSEARCH | ||
| EVAL_FAILED | Streamed search failed to eval %s | |
| BUNDLES_SETUP_FAIL | Failed to create bundles setup with server name: %s | |
| PARSE_FAILED | Streamed search parse failed because : %s | |
| SERVER_NAME_FAIL | No server name found in the url. The correct context cannot be determined. | |
| EXEC_FAILED | Streamed search execute failed because : %s | |
| INSUFF_PRIVILEGES | Streamed search failed because of insufficient privileges to run search | |
| SUMMARY | ||
| CORRUPT_GROUPCOUNT | Corrupt prestats groupcount | |
| TAKES_NO_ARGUMENTS | '%s' command takes no arguments | |
| CORRUPT_TYPE | Corrupt prestats type | |
| TAGSGEN | ||
| CANNOT_ALIAS_SRCTYPE | You do not have permission to alias sourcetypes. | |
| CANNOT_EDIT_TAGS | You do not have permission to edit tags. | |
| TIMELINE | ||
| KV_CNT_FAIL | Error reading key-value count for '%s' from timeline result. | |
| KEY_CNT_FAIL | Error reading key count for '%s' from timeline result. | |
| CANNOT_ADVANCE | Unable to advance bucket: %lx | |
| MISSING_DURATION | missing duration field | |
| CANNOT_SNAP | Unable to snap to bucket: %ld | |
| CANNOT_ADVANCE | Unable to advance bucket: %ld | |
| DISTINCT_CNT_FAIL | Error reading key distinct count for '%s' from timeline result. | |
| TIMELINER | ||
| COMMIT_VIOLATION | Ignored %lu events because they were after the commit time (%lu) | |
| TOTALS | ||
| EMPTY_FIELDNAME | Fieldname must not be empty. | |
| TRANSAM | ||
| WILDCARDS_ONLY_AT_END_OF_NAMES | Wildcards are only supported at the end of transaction names. | |
| BAD_ALIAS | Bad alias with '%s'. Expected format is <attr>=<val>. | |
| BAD_EXCLUSIVE_BOOLEAN | Invalid boolean value '%s' for 'exclusive' field. Defaulting to true. | |
| FIELDS_OPT_INVALID | The fields option is invalid when a list of fields is provided in argument list. | |
| UNKNOWN_TRANSACTION_FIELD | Field '%s' does not exist in results and is required for transactions '%s'. | |
| UNKNOWN_EVENTTYPE | Unknown eventtype '%s'. | |
| UNABLE_TO_FIND_ALIAS | Unable to find alias '%s' in pattern '%s' | |
| UNKNOWN_TRANSACTION | Unknown transaction '%s' | |
| UNSUPPORTED_MATCHTYPE | Unsupported matchtype '%s'. Currently only 'closest' is supported. | |
| NO_CONSTRAINTS | There must be at least one constraint for finding transactions. | |
| TYPEDISC | ||
| INVALID_NUM_ARGS | Only one optional argument expected, <grouping-field>. | |
| WHERE | ||
| BAD_RESULT | Invalid expression. The result of a 'where' expression must be boolean. | |
| XYSERIES | ||
| USAGE | USAGE: %s x-field y-name-field y-data-field |