<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic how to pass a global variable as source? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/how-to-pass-a-global-variable-as-source/m-p/465084#M80211</link>
    <description>&lt;P&gt;I add a global variable like below&lt;BR /&gt;
`&lt;BR /&gt;
  globalvariable&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;query&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;| makeresults | eval var="D:\ALM-Splunk-Delivery\Reports\Project_Area_1\CRS_Requirements\data.csv"&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;preview&amp;gt;

  &amp;lt;set token="source1"&amp;gt;$result.var$&amp;lt;/set&amp;gt;
&amp;lt;/preview&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;`&lt;/P&gt;

&lt;P&gt;I want to pass $source1$ as variable in report as below&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;single&amp;gt;
        &amp;lt;title&amp;gt;count with date&amp;lt;/title&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt; index="newindex" source="$source1$" |stats count&amp;lt;/query&amp;gt;
        &amp;lt;/search&amp;gt;
 &amp;lt;/single&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Wed, 30 Sep 2020 01:56:47 GMT</pubDate>
    <dc:creator>reney44</dc:creator>
    <dc:date>2020-09-30T01:56:47Z</dc:date>
    <item>
      <title>how to pass a global variable as source?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/how-to-pass-a-global-variable-as-source/m-p/465084#M80211</link>
      <description>&lt;P&gt;I add a global variable like below&lt;BR /&gt;
`&lt;BR /&gt;
  globalvariable&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;query&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;| makeresults | eval var="D:\ALM-Splunk-Delivery\Reports\Project_Area_1\CRS_Requirements\data.csv"&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;preview&amp;gt;

  &amp;lt;set token="source1"&amp;gt;$result.var$&amp;lt;/set&amp;gt;
&amp;lt;/preview&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;`&lt;/P&gt;

&lt;P&gt;I want to pass $source1$ as variable in report as below&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;single&amp;gt;
        &amp;lt;title&amp;gt;count with date&amp;lt;/title&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt; index="newindex" source="$source1$" |stats count&amp;lt;/query&amp;gt;
        &amp;lt;/search&amp;gt;
 &amp;lt;/single&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Wed, 30 Sep 2020 01:56:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/how-to-pass-a-global-variable-as-source/m-p/465084#M80211</guid>
      <dc:creator>reney44</dc:creator>
      <dc:date>2020-09-30T01:56:47Z</dc:date>
    </item>
  </channel>
</rss>

