- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Search using MAP COMMAND

ssadanala1
Contributor
07-13-2020
09:22 AM
I have dropdown which has to execute the two different searches based on token picker
I am trying to implement the mechanism using the functionality below .Map is not returning any results
|makeresults | eval a = "index=_internal|head1" |eval b = "index=main|head1"|eval search1 = case($tok$=1,a ,1=1,b) |map search = "search $search1$"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

niketn
Legend
07-13-2020
11:04 AM
@ssadanala1 do you mean token picker or time picker? Could you add more details about your use case? What are the two SPLs that you want to run and what is the condition based on token?
Based on the details about your use case seems like you do not need map command. You can use input <change> event handler or an independent search.
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
| makeresults | eval message= "Happy Splunking!!!"
