topic Re: How to run a parameterized map command as a savedsearch report? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-run-a-parameterized-map-command-as-a-savedsearch-report/m-p/418440#M120315 <P>Just had the very same problem and spent far too long trying to solve it. If you write test like this: <CODE>$test$</CODE> then splunk interprets this as expecting an input variable of test. To resolve this it looks like you have to use double dollar signs:<BR /> <CODE>| makeresults count=1 | eval test="Hello" | map search="| makeresults count=1 | eval test=$$test$$"</CODE></P> Tue, 14 Jan 2020 12:29:53 GMT ammara 2020-01-14T12:29:53Z How to run a parameterized map command as a savedsearch report? https://community.splunk.com/t5/Splunk-Search/How-to-run-a-parameterized-map-command-as-a-savedsearch-report/m-p/418439#M120314 <P>Hi everyone, </P> <P>I have the following dummy search saved as a report:</P> <P><CODE>| makeresults count=1 | eval test="Hello" | map search="| makeresults count=1 | eval test=\"$test$\""</CODE></P> <P>Executing this search directly runs without issues. However when calling it using the savedsearch-command:</P> <P><CODE>| savedsearch TestReport</CODE></P> <P>I get the following error message:</P> <P><STRONG>Error in 'savedsearch' command: Encountered the following error while building a search for saved search 'TestReport': Error while replacing variable name='test'. Could not find variable in the argument map.</STRONG></P> <P>I'm running Splunk 7.1.1 on a standalone machine. Does someone has a clue why it can be executed manually but not as a report and how I could execute it as a report?</P> <P>Kind regards,<BR /> Bojan</P> Fri, 01 Mar 2019 07:39:32 GMT https://community.splunk.com/t5/Splunk-Search/How-to-run-a-parameterized-map-command-as-a-savedsearch-report/m-p/418439#M120314 bojanjanisch 2019-03-01T07:39:32Z Re: How to run a parameterized map command as a savedsearch report? https://community.splunk.com/t5/Splunk-Search/How-to-run-a-parameterized-map-command-as-a-savedsearch-report/m-p/418440#M120315 <P>Just had the very same problem and spent far too long trying to solve it. If you write test like this: <CODE>$test$</CODE> then splunk interprets this as expecting an input variable of test. To resolve this it looks like you have to use double dollar signs:<BR /> <CODE>| makeresults count=1 | eval test="Hello" | map search="| makeresults count=1 | eval test=$$test$$"</CODE></P> Tue, 14 Jan 2020 12:29:53 GMT https://community.splunk.com/t5/Splunk-Search/How-to-run-a-parameterized-map-command-as-a-savedsearch-report/m-p/418440#M120315 ammara 2020-01-14T12:29:53Z