Splunk Search

Can I do an eval on static values of an input?

Builder

i have an input where I choose some values, based on which i want another input value to be calculated.

Can I do an eval on an input ( static/dynamic)?

Tags (2)
0 Karma

SplunkTrust
SplunkTrust

@jiagya you can use <eval> to set required token on input <change> event handler, where predefined tokens $value$ and $label$ can be used to access input's value and Label respectively. Refer to documentation: http://docs.splunk.com/Documentation/Splunk/latest/Viz/tokens#Define_token_filtering_and_formatting

<input type="text" token="someToken">
  <label>Some Field Name</label>
  <change>
    <eval token="tokNewValue">"Something New".$value$</eval>
   </change>
 .....
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

Builder

Thanks Niket, but i did not get the gist of it.

i have a input dropdown, where i select a value , ex: 30
then i want to calculate 30*something for example in another input filter

i am able to print the value on the new input filter, but unable to do calculations, its giving me error.

could not upload the screenshot

0 Karma