Splunk Search

How to search with result string with "../"?

mclane41
Explorer

Try this request on Splunk :

 

 

| makeresults | eval redir="../../app"

 

 

My request is automatically transformed by 

 

 

| makeresults | eval redir="app"

 

 

How can I have a work around ?

I try on chrome or firefox without success.

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @mclane41,

I tested your issue on an 8.2 version and the issue is present.

This means that this is a known issue solved with the new versions, so the only solution is to upgrade Splunk.

Ciao.

Giuseppe

 

View solution in original post

mclane41
Explorer

I work with the version Enterprise 8.2.0

mclane41_0-1677145819805.png

 

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @mclane41,

I tested your issue on an 8.2 version and the issue is present.

This means that this is a known issue solved with the new versions, so the only solution is to upgrade Splunk.

Ciao.

Giuseppe

 

gcusello
SplunkTrust
SplunkTrust

Hi @mclane41,

also on 9.0.4 works fine!

gcusello_0-1677137884464.png

ciao.

Giuseppe

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Which version of Splunk are you using?  The first query works for me in 9.0.0.1.

richgalloway_0-1677089502677.png

 

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...