Dashboards & Visualizations

How to get a dashboard input token to handle values that contain spaces?

Zerophage
New Member

Hi all, new to Splunk.

I have a Dashboard Input with a token which is assigned a value which can be a string with spaces. For example it might be a subject of an email like "RE: How was work".

Now I have a search in the same dashboard which uses that token like message_subject=$search_subject$ but it returns nothing. I suspect it is due to the spaces in the value and i need to add quotes to the token.

Is there an easy way to do this?

Thanks!

Tags (3)
0 Karma
1 Solution

gcusello
Legend

Hi Zerophage,
if spaces are the problem, try using brackets:

message_subject="$search_subject$"

Bye.
Giuseppe

View solution in original post

Zerophage
New Member

Thanks! Why did I not think of that, was trying all sorts other than the most obvious haha.

0 Karma

gcusello
Legend

Hi Zerophage,
if spaces are the problem, try using brackets:

message_subject="$search_subject$"

Bye.
Giuseppe

Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...