https://community.splunk.com/t5/Dashboards-Visualizations/Splunk-and-variables-constants/m-p/131558#M7756 <P>You're looking for macros: <A href="http://docs.splunk.com/Documentation/Splunk/6.1.2/Search/Usesearchmacros">http://docs.splunk.com/Documentation/Splunk/6.1.2/Search/Usesearchmacros</A></P> Fri, 04 Jul 2014 23:37:49 GMT martin_mueller 2014-07-04T23:37:49Z https://community.splunk.com/t5/Dashboards-Visualizations/Splunk-and-variables-constants/m-p/131557#M7755 <P>Rather simple question but not sure if there is a solution for this.</P> <P>I am running a search</P> <PRE><CODE>search event_number=123 </CODE></PRE> <P>This search is powering multiple reports. Each report, right now, has that value embedded. Twice a month <CODE>event_number</CODE> changes and increases by 1. So when we prepare for the next event, we have to go through all reports and change search strings to</P> <PRE><CODE>search event_number=124 </CODE></PRE> <P>Was wondering if there is a simple way to set up the variable/constant <CODE>X=123</CODE> and run search <BR /> search event_number=X<BR /> So when we do change to <CODE>event_number 125</CODE>, we would have to do it only once.</P> <P>Thanks!</P> Mon, 28 Sep 2020 17:00:06 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Splunk-and-variables-constants/m-p/131557#M7755 ateterine 2020-09-28T17:00:06Z https://community.splunk.com/t5/Dashboards-Visualizations/Splunk-and-variables-constants/m-p/131558#M7756 <P>You're looking for macros: <A href="http://docs.splunk.com/Documentation/Splunk/6.1.2/Search/Usesearchmacros">http://docs.splunk.com/Documentation/Splunk/6.1.2/Search/Usesearchmacros</A></P> Fri, 04 Jul 2014 23:37:49 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Splunk-and-variables-constants/m-p/131558#M7756 martin_mueller 2014-07-04T23:37:49Z https://community.splunk.com/t5/Dashboards-Visualizations/Splunk-and-variables-constants/m-p/131559#M7757 <P>Or eventtypes. Take your pick. <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Sat, 05 Jul 2014 08:10:37 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Splunk-and-variables-constants/m-p/131559#M7757 Ayn 2014-07-05T08:10:37Z