Knowledge Management

macro input validation

narwhal
Splunk Employee
Splunk Employee

I'm having trouble getting input validation to work on my macro. I want to pass in a text string, not a number, but can't find any examples that appear to work for me. Thoughts?

Tags (2)
0 Karma
1 Solution

narwhal
Splunk Employee
Splunk Employee

OK, trial and error finally paid off.

My input variable is called st, so:

validation = st="blah" OR st="blahblah"

errormsg = usage: mymacro(st) where st is blah or blahblah

View solution in original post

0 Karma

narwhal
Splunk Employee
Splunk Employee

OK, trial and error finally paid off.

My input variable is called st, so:

validation = st="blah" OR st="blahblah"

errormsg = usage: mymacro(st) where st is blah or blahblah

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...