topic Search key with variable in Splunk Search

Search key with variable

hello_world15 — Mon, 28 Sep 2020 11:52:16 GMT

I have events like this: Desc_1=eth1
Desc_50=vlan.10
Desc_123=vlan.20
....

the key is in Descr_* format and I want to have a search and disply as select box like this.

<option value="Desc_1">eth1</option> <option value="Desc_50">vlan.10</option> <option value="Desc_123">vlan.20</option>

I have some try but no luck because the key is not static... Thanks alot.

Ayn — Sun, 27 May 2012 14:49:56 GMT

hello_world15 — Mon, 28 Sep 2020 11:52:21 GMT

Sorry, may be I have not described my question clearly.

Acutally I need to have a search result like this, so that I will make it become select box.

key value
Desc_1 eth1
Desc_50 vlan.10
Desc_123 vlan.20

Since the key is in Desc_* format, i tried the search like this not work:

Desc_* | stats count by Descr_*

Thanks a lot.

Ayn — Mon, 28 May 2012 07:00:02 GMT

Have a look at the fieldForValue and fieldForLabel parameters. One is used for setting the label, and one for setting the value.