Getting Data In

use where command with a variable that can we get from input text field

Communicator

hi,
how can we use where command with a variable that can we get from input text field

<searchTemplate>
| where product =$product$

            <input type="text" token="product ">
Tags (3)
0 Karma
1 Solution

SplunkTrust
SplunkTrust

Just a guess, but try search instead of where.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

SplunkTrust
SplunkTrust

Just a guess, but try search instead of where.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

Communicator

thank you for your respons it works 🙂

0 Karma

Communicator

yes, I tried it, but the query doesn't return any result. this is my query :

|dbquery "db_sales" "SELECT model, year, product, FROM cars c , product p where v.product=p.idproduct"

| fields model, year, pays, product| where product="$product$"
any ideas

0 Karma

Communicator

You are using it right but you can take a look at this http://docs.splunk.com/Documentation/Splunk/6.2.3/Viz/tokens

You probably need to change | where product =$product$ -> | where product ="$product$"

And the token field in input should not contain the space after product, token="product " -> token="product"

Try that and report, glad i could help

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!