topic Re: variable definition in Splunk Search

variable definition

daktapaal — Tue, 07 Jan 2014 21:10:26 GMT

HI All,
I am new to SPlunk. My colleague who is very experienced in this, had this in his code..

eval runtime="$run.value$"

I searched for the $run.value$ in the code and I couldn't find any. If anyone would please point me to where I can search for this , It will be of great relief. I am guessing this is some env variable, but I am not sure.

Thanks in advance…
dak

Re: variable definition

aholzer — Tue, 07 Jan 2014 21:34:46 GMT

Is this in a macro definition? or in a dashboard/form definition?

Re: variable definition

daktapaal — Tue, 07 Jan 2014 21:42:24 GMT

it probably is.. I shall check. Thanks,

Re: variable definition

aholzer — Tue, 07 Jan 2014 21:47:30 GMT

2 things:
1) You probably shouldn't post comments as answers, because it confuses things. You can convert your "answer" to a comment by clicking the "more" dropdown and selecting "convert to comment"
2) I'm going to wager a guess and assume it's a dashboard/form definition. Google forms and tokens, and your questions should be answered.

To wager a further guess, I would say that the $run.value$ is defined under a parent module that displays info and then as a drilldown someone clicks a row (or point on graph) and a further display of info comes up based on your clicked value

Hope this helps