topic Re: My Named Searches are being Audited, can I put a title on my search? in Splunk Search https://community.splunk.com/t5/Splunk-Search/My-Named-Searches-are-being-Audited-can-I-put-a-title-on-my/m-p/157108#M44209 <P>My only suggestion would be for you to stick an extraneous <CODE>eval</CODE> command in the middle of the search, e.g., from:</P> <PRE><CODE>sourcetype=mysourcetype userid=xyz | stats count by source_ip </CODE></PRE> <P>to</P> <PRE><CODE>sourcetype=mysourcetype userid=xyz | eval ticket_number="ABC1234567" | stats count by source_ip </CODE></PRE> Fri, 25 Jul 2014 01:29:00 GMT gkanapathy 2014-07-25T01:29:00Z My Named Searches are being Audited, can I put a title on my search? https://community.splunk.com/t5/Splunk-Search/My-Named-Searches-are-being-Audited-can-I-put-a-title-on-my/m-p/157107#M44208 <P>Our named searches are being audited. Named searches are those that have a specific User name in the actual search syntax. Those are audited and I would like to find a way to attach a ticket number to the search so a named search would be labeled by a ticket number. </P> <P>Is there a way to do this on an inline search?</P> Fri, 25 Jul 2014 01:19:04 GMT https://community.splunk.com/t5/Splunk-Search/My-Named-Searches-are-being-Audited-can-I-put-a-title-on-my/m-p/157107#M44208 mcm10285 2014-07-25T01:19:04Z Re: My Named Searches are being Audited, can I put a title on my search? https://community.splunk.com/t5/Splunk-Search/My-Named-Searches-are-being-Audited-can-I-put-a-title-on-my/m-p/157108#M44209 <P>My only suggestion would be for you to stick an extraneous <CODE>eval</CODE> command in the middle of the search, e.g., from:</P> <PRE><CODE>sourcetype=mysourcetype userid=xyz | stats count by source_ip </CODE></PRE> <P>to</P> <PRE><CODE>sourcetype=mysourcetype userid=xyz | eval ticket_number="ABC1234567" | stats count by source_ip </CODE></PRE> Fri, 25 Jul 2014 01:29:00 GMT https://community.splunk.com/t5/Splunk-Search/My-Named-Searches-are-being-Audited-can-I-put-a-title-on-my/m-p/157108#M44209 gkanapathy 2014-07-25T01:29:00Z Re: My Named Searches are being Audited, can I put a title on my search? https://community.splunk.com/t5/Splunk-Search/My-Named-Searches-are-being-Audited-can-I-put-a-title-on-my/m-p/157109#M44210 <P>That's it! So simple! Thank you!</P> Fri, 25 Jul 2014 01:49:19 GMT https://community.splunk.com/t5/Splunk-Search/My-Named-Searches-are-being-Audited-can-I-put-a-title-on-my/m-p/157109#M44210 mcm10285 2014-07-25T01:49:19Z