I created a macro with 3 arguments in UI as,
sample(3) with definition 'index=shapes sourcetype=rectangle |search $height$ $weight$ $mode$ |.....'
In my search i called the macro as below
sample($height$,$weight$,$mode$)
|...|...
I get an error.Can anyone help with exact way of writing this scenario.
You call it EITHER with literals (e.g. "32"
) or with existing field names (e.g. weight
and mode
), without the dollar-signs, like this (assuming that you are not running this inside of a dashboard panel where you are trying to access dashboard tokens):
Your base search here | `sample("32",weight,mode)`
you need to call macro with back-ticks
`sample($height$,$weight$,$mode$)`
@nivethainspire_07... You will also have to pass parameters as string to macro...So the tokens should be inside double quotes:
`sample("$height$","$weight$","$mode$")`