Dashboards & Visualizations

Issue in passing the selected value from doprdown to savedsearch

anjith05
New Member

i have a dropdown which is populated by search results, i want to pass the selected value to a savedsearch, the output of the search result is of format num1-num2 when i pass the value to savedsearch it is getting the difference between the numbers i need the selected value in original format not the difference between the two numbers, the hyphen is being detected as a minus operator.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Have you tried putting the value in quotation marks ("num1-num2")? You can do that by adding |s to your token as in $tokenName|s$.

---
If this reply helps you, Karma would be appreciated.
0 Karma

anjith05
New Member

thanks for the update, i tried below, but still shows the diff
| savedsearch "xxxxxx" Token=$Token|s$

in the savedsearch xxxxxx - i have below, just to see whats coming in...
index=abc sourcetype=xyz
| eval TicketIn=$Token$
| table TicketIn

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...