Splunk Search

How do I pass an input parameter to the search string of another input?

srizan
Path Finder

I have multiple inputs in the dashboard. The first input is for various environments (hard coded). And the second input is for various accounts from the selected environment (leverages search string). I have the first input tokenized as "env" however, passing it in the second input search string as environment=$env$ doesn't yield the value from the first input.

Tags (2)
0 Karma

srizan
Path Finder

Yeah! Seems like there was some issue with caching maybe, it worked in incognito.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @srizan,
searches are the same in inputs and panels, so you can manage tokens in the same way.
check if you need quotes because $env$ could contain spaces:

environment="$env$"

Ciao.
Giuseppe

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @srizan,
what do you mean with " it worked in incognito."?
Did you solved?

Ciao.
Giuseppe

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...