All Apps and Add-ons

Escaping $ in SideView Search Module

Dan
Splunk Employee
Splunk Employee

Using SVU 2.1.2, I have a Search module with the following:

<![CDATA[
search ... | eval isError=if(match(MethodString,"e$"),"True","False")
]]>

This complains "Unbalanced quotes."

How do I escape the $ so SideView doesn't try expanding it into a token?

0 Karma
1 Solution

sideview
SplunkTrust
SplunkTrust

If you need to put in a literal "$" character, you just put two consecutive chars together like so: "$$".

Here are some documentation pages about $foo$ tokens.

  1. Overview of all $foo$ tokens, and which ones are available downstream from which modules :
    "Key Techniques > Other > Overview of all the $foo$ tokens"

  2. Some docs specifically about encoding literal dollar signs as "$$", on the HTML module's page:
    "Module Documentation > Html Module > Embedding HTML and including $foo$ values".

    Although it's within the HTML module section, the same $$ trick will work everywhere.

View solution in original post

sideview
SplunkTrust
SplunkTrust

If you need to put in a literal "$" character, you just put two consecutive chars together like so: "$$".

Here are some documentation pages about $foo$ tokens.

  1. Overview of all $foo$ tokens, and which ones are available downstream from which modules :
    "Key Techniques > Other > Overview of all the $foo$ tokens"

  2. Some docs specifically about encoding literal dollar signs as "$$", on the HTML module's page:
    "Module Documentation > Html Module > Embedding HTML and including $foo$ values".

    Although it's within the HTML module section, the same $$ trick will work everywhere.

Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...