Dashboards & Visualizations

Issue in passing the selected value from doprdown to savedsearch

anjith05
New Member

i have a dropdown which is populated by search results, i want to pass the selected value to a savedsearch, the output of the search result is of format num1-num2 when i pass the value to savedsearch it is getting the difference between the numbers i need the selected value in original format not the difference between the two numbers, the hyphen is being detected as a minus operator.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Have you tried putting the value in quotation marks ("num1-num2")? You can do that by adding |s to your token as in $tokenName|s$.

---
If this reply helps you, Karma would be appreciated.
0 Karma

anjith05
New Member

thanks for the update, i tried below, but still shows the diff
| savedsearch "xxxxxx" Token=$Token|s$

in the savedsearch xxxxxx - i have below, just to see whats coming in...
index=abc sourcetype=xyz
| eval TicketIn=$Token$
| table TicketIn

0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...