simple form

[DTERM]

I'm trying to write a simple form for this query

index=myapp tgtHostname="some.hostname.variable.com"

What is wrong with the following as written?

My form search tgthostname=$tgtHostname$

[RicoSuave · Accepted solution]

You need an upper case T in searchTemplate

Also you need a results module to display results.

http://docs.splunk.com/Documentation/Splunk/latest/Developer/Step3FormOutput

[RicoSuave]

You're welcome. Can you accept my answer? 😛

[DTERM]

Perfect!! Thanks much!!