<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to include an app name as a part of the search query? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112915#M29666</link>
    <description>&lt;P&gt;What are you trying to achieve with that question? It's passive aggressive and unhelpful.&lt;/P&gt;</description>
    <pubDate>Tue, 12 Jun 2018 16:24:26 GMT</pubDate>
    <dc:creator>rharrisssi</dc:creator>
    <dc:date>2018-06-12T16:24:26Z</dc:date>
    <item>
      <title>How to include an app name as a part of the search query?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112906#M29657</link>
      <description>&lt;P&gt;Is there a way by which I can get the app name as the part of the search query. Something like&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=myindex | eval my_app_name=$app_name$|
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;So if I'm executing the query above in the &lt;EM&gt;search and reporting&lt;/EM&gt; app, my_app_name should be searched.&lt;/P&gt;

&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 18:44:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112906#M29657</guid>
      <dc:creator>nibinabr</dc:creator>
      <dc:date>2020-09-28T18:44:46Z</dc:date>
    </item>
    <item>
      <title>Re: How to include an app name as a part of the search query?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112907#M29658</link>
      <description>&lt;P&gt;What are you trying to achieve here? Why would you want the app name in the search query? &lt;/P&gt;</description>
      <pubDate>Tue, 27 Jan 2015 20:38:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112907#M29658</guid>
      <dc:creator>alacercogitatus</dc:creator>
      <dc:date>2015-01-27T20:38:53Z</dc:date>
    </item>
    <item>
      <title>Re: How to include an app name as a part of the search query?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112908#M29659</link>
      <description>&lt;P&gt;You could do this:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;  index=myindex | eval [rest /services/search/jobs splunk_server=local | addinfo | where sid = info_sid | rename eai:acl.app as my_app_name | return my_app_name]
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 27 Jan 2015 23:00:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112908#M29659</guid>
      <dc:creator>martin_mueller</dc:creator>
      <dc:date>2015-01-27T23:00:39Z</dc:date>
    </item>
    <item>
      <title>Re: How to include an app name as a part of the search query?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112909#M29660</link>
      <description>&lt;P&gt;Exactly what I was looking for. &lt;BR /&gt;
Thanks&lt;/P&gt;</description>
      <pubDate>Wed, 28 Jan 2015 14:31:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112909#M29660</guid>
      <dc:creator>nibinabr</dc:creator>
      <dc:date>2015-01-28T14:31:48Z</dc:date>
    </item>
    <item>
      <title>Re: How to include an app name as a part of the search query?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112910#M29661</link>
      <description>&lt;P&gt;I'm with @alacercogitatus though, curious what you're trying to achieve here.&lt;/P&gt;</description>
      <pubDate>Wed, 28 Jan 2015 16:55:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112910#M29661</guid>
      <dc:creator>martin_mueller</dc:creator>
      <dc:date>2015-01-28T16:55:04Z</dc:date>
    </item>
    <item>
      <title>Re: How to include an app name as a part of the search query?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112911#M29662</link>
      <description>&lt;P&gt;I'm trying to build a dashboard that performs some operations on the URL &lt;EM&gt;en-US/app/app_name/&lt;/EM&gt; and I want this dashboard to work on all the apps without trying to change the app name.&lt;/P&gt;</description>
      <pubDate>Wed, 28 Jan 2015 17:21:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112911#M29662</guid>
      <dc:creator>nibinabr</dc:creator>
      <dc:date>2015-01-28T17:21:15Z</dc:date>
    </item>
    <item>
      <title>Re: How to include an app name as a part of the search query?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112912#M29663</link>
      <description>&lt;P&gt;No luck with relative URLs?&lt;/P&gt;</description>
      <pubDate>Wed, 28 Jan 2015 17:27:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112912#M29663</guid>
      <dc:creator>martin_mueller</dc:creator>
      <dc:date>2015-01-28T17:27:54Z</dc:date>
    </item>
    <item>
      <title>Re: How to include an app name as a part of the search query?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112913#M29664</link>
      <description>&lt;P&gt;I just discovered that, starting with 6.5.0, there's some sweet new global tokens!&lt;/P&gt;

&lt;P&gt;One of which is &lt;CODE&gt;$env:app$&lt;/CODE&gt;&lt;/P&gt;

&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/6.5.1/Viz/tokens#Use_global_tokens_to_access_environment_information"&gt;http://docs.splunk.com/Documentation/Splunk/6.5.1/Viz/tokens#Use_global_tokens_to_access_environment_information&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 18 Nov 2016 15:39:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112913#M29664</guid>
      <dc:creator>sloshburch</dc:creator>
      <dc:date>2016-11-18T15:39:06Z</dc:date>
    </item>
    <item>
      <title>Re: How to include an app name as a part of the search query?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112914#M29665</link>
      <description>&lt;P&gt;Thanks! Just what I needed!&lt;/P&gt;</description>
      <pubDate>Thu, 31 May 2018 11:47:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112914#M29665</guid>
      <dc:creator>Dawson014</dc:creator>
      <dc:date>2018-05-31T11:47:23Z</dc:date>
    </item>
    <item>
      <title>Re: How to include an app name as a part of the search query?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112915#M29666</link>
      <description>&lt;P&gt;What are you trying to achieve with that question? It's passive aggressive and unhelpful.&lt;/P&gt;</description>
      <pubDate>Tue, 12 Jun 2018 16:24:26 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-include-an-app-name-as-a-part-of-the-search-query/m-p/112915#M29666</guid>
      <dc:creator>rharrisssi</dc:creator>
      <dc:date>2018-06-12T16:24:26Z</dc:date>
    </item>
  </channel>
</rss>

