Dashboards & Visualizations

Issue in passing the selected value from doprdown to savedsearch

anjith05
New Member

i have a dropdown which is populated by search results, i want to pass the selected value to a savedsearch, the output of the search result is of format num1-num2 when i pass the value to savedsearch it is getting the difference between the numbers i need the selected value in original format not the difference between the two numbers, the hyphen is being detected as a minus operator.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Have you tried putting the value in quotation marks ("num1-num2")? You can do that by adding |s to your token as in $tokenName|s$.

---
If this reply helps you, Karma would be appreciated.
0 Karma

anjith05
New Member

thanks for the update, i tried below, but still shows the diff
| savedsearch "xxxxxx" Token=$Token|s$

in the savedsearch xxxxxx - i have below, just to see whats coming in...
index=abc sourcetype=xyz
| eval TicketIn=$Token$
| table TicketIn

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...