topic help me with dashboard XML in Dashboards & Visualizations

help me with dashboard XML

sravankaripe — Tue, 07 Feb 2017 16:43:16 GMT

i am finding difficulty with dashboard XML beacause of

tag SubErrorCode
please help me with this

  <search>
   <query>-------------| rex "\"subErrorCode\":\"(?<SubErrorCode>w\w\w_\d+)"| dedup  SubErrorCode |table SubErrorCode </query>
  </search>

sravankaripe — Tue, 07 Feb 2017 16:45:28 GMT

tag SubErrorCode

sravankaripe — Tue, 07 Feb 2017 16:58:28 GMT

sravankaripe — Tue, 07 Feb 2017 16:59:18 GMT

i got it by using escape characters

aaraneta_splunk — Tue, 07 Feb 2017 19:15:41 GMT

@sravankaripe: Did your answer provide a working solution to your question? If yes, don't forget to click "Accept".

sravankaripe — Tue, 07 Feb 2017 19:19:59 GMT

Ok, it's working for me

sravankaripe — Tue, 07 Feb 2017 19:30:20 GMT

-------------| rex "\"subErrorCode\":\"(?<SubErrorCode&gtw\w\w_\d+)"| dedup SubErrorCode |table SubErrorCode