topic Re: use where command with a variable that can we get from input text field in Getting Data In

use where command with a variable that can we get from input text field

otman01 — Fri, 10 Jul 2015 09:11:55 GMT

hi,
how can we use where command with a variable that can we get from input text field

<searchTemplate>
| where product =$product$

            <input type="text" token="product ">

Re: use where command with a variable that can we get from input text field

joao_amorim — Fri, 10 Jul 2015 10:10:34 GMT

You are using it right but you can take a look at this http://docs.splunk.com/Documentation/Splunk/6.2.3/Viz/tokens

You probably need to change | where product =$product$ -> | where product ="$product$"

And the token field in input should not contain the space after product, token="product " -> token="product"

Try that and report, glad i could help

Re: use where command with a variable that can we get from input text field

otman01 — Fri, 10 Jul 2015 10:21:09 GMT

yes, I tried it, but the query doesn't return any result. this is my query :

|dbquery "db_sales" "SELECT model, year, product, FROM cars c , product p where v.product=p.idproduct"

| fields model, year, pays, product| where product="$product$"
any ideas

Re: use where command with a variable that can we get from input text field

richgalloway — Fri, 10 Jul 2015 11:37:57 GMT

Just a guess, but try search instead of where.

Re: use where command with a variable that can we get from input text field

otman01 — Fri, 10 Jul 2015 12:47:49 GMT

thank you for your respons it works 🙂