How to define a macro with source filename in argument

[emcathalo]

Hi,

Thanks to tell me how to replace following search:

index=myIndex source="E:\\myApp\\Logs\\myFile.csv"

by a macro called by:

Get_source("E:\\myApp\\Logs\\myFile.csv")

Or even better by a macro called by:

Get_source("myFile.csv")

Emmanuel.

[Ayn]

http://docs.splunk.com/Documentation/Splunk/5.0.2/Search/Usesearchmacros