<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Custom Search Command pass arguments as subsearch in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Custom-Search-Command-pass-arguments-as-subsearch/m-p/554357#M91871</link>
    <description>&lt;P&gt;I need to pass two values to my &lt;STRONG&gt;Custom Search Command.&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;These are my Options:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;x = Option(require=True)
y = Option(require=True)&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;I want to pass those via a &lt;STRONG&gt;subsearch. &lt;/STRONG&gt;I&amp;nbsp;tried:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;my_custom_search x=[search type="GGA" | stats latest(latitude) as x, latest(longitude)as y]&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;However Splunk complains about&amp;nbsp;&lt;STRONG&gt;missing y options!&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;How can I achieve what I wont?&lt;/P&gt;&lt;P&gt;Thank you in advance!&lt;/P&gt;</description>
    <pubDate>Thu, 03 Jun 2021 19:43:09 GMT</pubDate>
    <dc:creator>Unige2021</dc:creator>
    <dc:date>2021-06-03T19:43:09Z</dc:date>
    <item>
      <title>Custom Search Command pass arguments as subsearch</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Custom-Search-Command-pass-arguments-as-subsearch/m-p/554357#M91871</link>
      <description>&lt;P&gt;I need to pass two values to my &lt;STRONG&gt;Custom Search Command.&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;These are my Options:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;x = Option(require=True)
y = Option(require=True)&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;I want to pass those via a &lt;STRONG&gt;subsearch. &lt;/STRONG&gt;I&amp;nbsp;tried:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;my_custom_search x=[search type="GGA" | stats latest(latitude) as x, latest(longitude)as y]&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;However Splunk complains about&amp;nbsp;&lt;STRONG&gt;missing y options!&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;How can I achieve what I wont?&lt;/P&gt;&lt;P&gt;Thank you in advance!&lt;/P&gt;</description>
      <pubDate>Thu, 03 Jun 2021 19:43:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Custom-Search-Command-pass-arguments-as-subsearch/m-p/554357#M91871</guid>
      <dc:creator>Unige2021</dc:creator>
      <dc:date>2021-06-03T19:43:09Z</dc:date>
    </item>
  </channel>
</rss>

