I am new to splunk and i am trying the following
get a value from PullDown list
do a savedSearch
do postProcess by using the value selected from the drop down. the value is one of the eventtype
But i always get the output of the savedSearch and post processing seems to be not happening.
For postProcess search, i tried
| eventtype=$envtype$
search eventtype=$envtype$
eventtype=$envtype$
Can anyone throw some light here ?
TrunkFarm
Trunk
TestFarm
Integration
envtype
Environment:
<module name="HiddenSavedSearch" layoutPanel="panel_row1_col1" autoRun="True">
<param name="savedSearch">TransactionLogCountandDurationforTestServicesGen</param>
<module name="PostProcess" layoutPanel="panel_row1_col1" autoRun="True">
<param name="search">search eventtype=$envtype$</param>
<module name="SimpleResultsHeader">
<param name="entityName">results</param>
<param name="headerFormat">$time$ - Updates every 5 minutes</param>
</module>
</module>
... View more