Dashboards & Visualizations

How to get a dashboard input token to handle values that contain spaces?

Zerophage
New Member

Hi all, new to Splunk.

I have a Dashboard Input with a token which is assigned a value which can be a string with spaces. For example it might be a subject of an email like "RE: How was work".

Now I have a search in the same dashboard which uses that token like message_subject=$search_subject$ but it returns nothing. I suspect it is due to the spaces in the value and i need to add quotes to the token.

Is there an easy way to do this?

Thanks!

Tags (3)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi Zerophage,
if spaces are the problem, try using brackets:

message_subject="$search_subject$"

Bye.
Giuseppe

View solution in original post

Zerophage
New Member

Thanks! Why did I not think of that, was trying all sorts other than the most obvious haha.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi Zerophage,
if spaces are the problem, try using brackets:

message_subject="$search_subject$"

Bye.
Giuseppe

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...