topic Re: Token for a field containing spaces and special characters in Dashboards & Visualizations

Token for a field containing spaces and special characters

chintu_jain — Wed, 20 Sep 2017 12:05:11 GMT

How do I return the value of a field that contains spaces and special characters using a Token? The field name is License quota used (%)

I tried the following combinations, however none appear to work.

$result."License quota used (%)"$
$"result.License quota used (%)"$
$result.License quota used (%)$"

Tried single quotes as well, but no luck.

Re: Token for a field containing spaces and special characters

sbbadri — Wed, 20 Sep 2017 14:51:40 GMT

Try this

1) $result.License%20quota%20used%20(%)$

2) <eval token="licenselabel">License quota used (%)</eval>
$result.licenselabel$
or

3) "$result.'License quota used (%)$"

Re: Token for a field containing spaces and special characters

cpetterborg — Wed, 20 Sep 2017 15:31:12 GMT

The token and the label don't have to be the same. Why not make the token easy to use?

Re: Token for a field containing spaces and special characters

chanmi2 — Fri, 11 May 2018 01:59:29 GMT

I am trying to do similar things in sending email alert, with inline table included. Point 1 and 3 did not work

Re: Token for a field containing spaces and special characters

gsinclair-lc — Mon, 17 Nov 2025 12:53:12 GMT

This is old, but in case anyone comes here looking for an answer... for tokens used in email or other alert actions (e.g. ServiceNow INC creation), in Splunk 9.4+ it simply works when using field names with spaces.

So if you have a fieldname with spaces, produced from a search with something like:

| table Queue "Message Count"

Then you can include that field in the alert/SNow action with:

$result.Message Count$