Escaping special characters in text input

willadams — Fri, 26 Feb 2021 05:52:55 GMT

I have a very basic dashboard that requires my users to put in text inputs. These inputs are then outputted to a CSV file that can be referenced. The basics of it are

<input type="text" token="user"> <label>user</label> </input> <input type="text" token="hostname"> <label>Host Name</label> </input> <input type="text" token="switch"> <label>Switchingcommand</label> </input>

I have my form being submitted via a submit button at the top of the form that takes this information and outputs this to a csv file with an append

The above works within the dashboard provided that there are no special characters. Due to the nature of the value for "switch" above, it can contain a long string with various escape characters. For example a string entered could be almost any special characters (for example it could contain "regex" or "#" or "=" or "$" or "[word]" etc. etc. etc.

I have tried modifying my search query as follows (adding in |s$) after the eval for switch

however this doesn't appear to work and the input silently fails. Have I used |s$ in the correct place or is this not possible?

Re: Escaping special characters in text input

ITWhisperer — Fri, 26 Feb 2021 07:26:19 GMT

Try

| eval switch="$switch|s$"

Re: Escaping special characters in text input

KeithH — Tue, 30 Jan 2024 01:54:22 GMT

Can anyone point me to where this escaping is documented in the Splunk manuals?

I can across it in a dashboard today and have not been able to track it down - very confusing until a colleague told me what it did.

Re: Escaping special characters in text input

bowesmana — Tue, 30 Jan 2024 03:30:05 GMT

https://docs.splunk.com/Documentation/Splunk/9.1.1/Viz/tokens#Token_filters

topic Re: Escaping special characters in text input in Splunk Search

Escaping special characters in text input

Re: Escaping special characters in text input

Re: Escaping special characters in text input

Re: Escaping special characters in text input