<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Using variable in same search in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Using-variable-in-same-search/m-p/34633#M7496</link>
    <description>&lt;P&gt;This sounds like a good situation to use a search macro. I could describe it a bit more but really I think the docs explain the concept best though: &lt;A href="http://docs.splunk.com/Documentation/Splunk/latest/User/CreateAndUseSearchMacros"&gt;http://docs.splunk.com/Documentation/Splunk/latest/User/CreateAndUseSearchMacros&lt;/A&gt;&lt;/P&gt;</description>
    <pubDate>Wed, 14 Dec 2011 09:30:20 GMT</pubDate>
    <dc:creator>Ayn</dc:creator>
    <dc:date>2011-12-14T09:30:20Z</dc:date>
    <item>
      <title>Using variable in same search</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Using-variable-in-same-search/m-p/34632#M7495</link>
      <description>&lt;P&gt;Hi. I am going to set up the same search - for a lot of different hosts.(20)&lt;/P&gt;

&lt;P&gt;The result of the search is displayed on 2 different dashboards.&lt;/P&gt;

&lt;P&gt;The search is running every 30 minutes - thus updating the dashboard every 30 minutes.&lt;/P&gt;

&lt;P&gt;I would like to use the same search - and just reference the different hosts - instead of having 20 saved searches which are the same - only difference is the host name.&lt;/P&gt;

&lt;P&gt;How do I accomplish this?&lt;/P&gt;</description>
      <pubDate>Wed, 14 Dec 2011 09:14:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Using-variable-in-same-search/m-p/34632#M7495</guid>
      <dc:creator>JYTTEJ</dc:creator>
      <dc:date>2011-12-14T09:14:59Z</dc:date>
    </item>
    <item>
      <title>Re: Using variable in same search</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Using-variable-in-same-search/m-p/34633#M7496</link>
      <description>&lt;P&gt;This sounds like a good situation to use a search macro. I could describe it a bit more but really I think the docs explain the concept best though: &lt;A href="http://docs.splunk.com/Documentation/Splunk/latest/User/CreateAndUseSearchMacros"&gt;http://docs.splunk.com/Documentation/Splunk/latest/User/CreateAndUseSearchMacros&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 14 Dec 2011 09:30:20 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Using-variable-in-same-search/m-p/34633#M7496</guid>
      <dc:creator>Ayn</dc:creator>
      <dc:date>2011-12-14T09:30:20Z</dc:date>
    </item>
    <item>
      <title>Re: Using variable in same search</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Using-variable-in-same-search/m-p/34634#M7497</link>
      <description>&lt;P&gt;Great! thank you so much!&lt;/P&gt;</description>
      <pubDate>Wed, 14 Dec 2011 11:08:43 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Using-variable-in-same-search/m-p/34634#M7497</guid>
      <dc:creator>JYTTEJ</dc:creator>
      <dc:date>2011-12-14T11:08:43Z</dc:date>
    </item>
    <item>
      <title>Re: Using variable in same search</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Using-variable-in-same-search/m-p/34635#M7498</link>
      <description>&lt;P&gt;No problem! Could you please mark my answer as accepted? Thanks!&lt;/P&gt;</description>
      <pubDate>Wed, 14 Dec 2011 12:00:32 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Using-variable-in-same-search/m-p/34635#M7498</guid>
      <dc:creator>Ayn</dc:creator>
      <dc:date>2011-12-14T12:00:32Z</dc:date>
    </item>
  </channel>
</rss>

