Getting Data In

use where command with a variable that can we get from input text field

Communicator

hi,
how can we use where command with a variable that can we get from input text field

<searchTemplate>
| where product =$product$

            <input type="text" token="product ">
Tags (3)
0 Karma
1 Solution

SplunkTrust
SplunkTrust

Just a guess, but try search instead of where.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

SplunkTrust
SplunkTrust

Just a guess, but try search instead of where.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

Communicator

thank you for your respons it works 🙂

0 Karma

Communicator

yes, I tried it, but the query doesn't return any result. this is my query :

|dbquery "db_sales" "SELECT model, year, product, FROM cars c , product p where v.product=p.idproduct"

| fields model, year, pays, product| where product="$product$"
any ideas

0 Karma

Communicator

You are using it right but you can take a look at this http://docs.splunk.com/Documentation/Splunk/6.2.3/Viz/tokens

You probably need to change | where product =$product$ -> | where product ="$product$"

And the token field in input should not contain the space after product, token="product " -> token="product"

Try that and report, glad i could help

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!