Issue:
The viewlet displays an error message similar to the below.
Possible solution:
Modify the query using the information provided in the error message. Using the above example, many times the solution is to increase “Bucketed by size.”
When data of “enum” data type (i.e. severity, compcode) are queried to display, the data type values must be used. The severity name can be replaced with the ID from the severity values table, specified by the query.
Get enumeration for severity
For example:
Get events where severity is ('3')
“String” functions such as “Starts With,” “Ends With,” “Contains,” cannot be defined for “Enum” data types.