Solved: How to write a validation expression for a macro? - Splunk Community

Knowledge Management

Hi,

i have defined macro like services($searchterm$,$mng$,$fng$)

how can we write validation expression? if we don't mention $searchterm$ while searching, it displays with validation message.

1 Solution

Solution

Try this

Validation expression: isnotnull($searchterm$)
Validation error message: The search term value that you have provided is not valid. Enter a valid search term.

View solution in original post

Solution

Try this

Validation expression: isnotnull($searchterm$)
Validation error message: The search term value that you have provided is not valid. Enter a valid search term.

It's not working for me. Maybe something changed since 2016?

Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Request for Professional Development: Attending .conf26

Winning Over the Boss: Your Pass to .conf26 conf26 is going to be here before you know it. If don't already ...

[Puzzles] Solve, Learn, Repeat: Classic British Rock Bands

This puzzle series (first published here) is based on extracting information from statements about well-known ...