Time series Splunk data source query is rejected as a non-time series query

Products

• Information Centric Analytics

Issue/Introduction

The following error is logged in the SQL Server Agent history log and in the Splunk importer log after creating or modifying a Splunk data source query:

Create Non Time Series Job failed – 400 Bad Request. The Splunk team has disabled all time searching.

Environment

Release : 6.x

Component: Splunk Import Utility

Resolution

Configure the query to include a time column per the Using the Integration Wizard to Create a User-defined Data Source section of the Symantec ICA Integration and Solution Accelerators Guide.