text box input

[splunkpoornima]

Hi all

in a form i need a Text box .in that whatever the value i am giving it should reterive only those task having those value as duration

i used the below code...

<form>
  <label>Sample form</label>
  <searchTemplate>
    source="C:\Users\20875\Desktop\taskmanager_log.txt"|transaction TaskBP startswith=START endswith=Succeeded|table TaskBP duration|where duration$duration$
  </searchTemplate>
  <fieldset>
      <input type="text" token="duration">
        <label>range</label>
        <default></default>
        <seed>600</seed>
      </input>
      <!-- Add default TimePicker -->
      <input type="time" />
  </fieldset>
  <row>
      <!-- Show results as a table -->
      <table>
        <option name="showPager">true</option>
        <option name="count">20</option>
      </table>
  </row>
</form>

so if i run the code, i am getting wrong output

plz suggest me the correction in the code...

Thanks in advance

poornima

[Drainy]

| where duration==$duration$ ? or perhaps | search duration=$duration$

[Drainy]

Ayn: Check your email! Splunkppornima: Did you try the search condition instead? Also, all of what Ayn said. You really need to go and learn how to debug these problems to run Splunk effectively

[Ayn]

Well did you inspect the search to see why you're not getting results?

[splunkpoornima]

i am getting no results found when i give the values in the text box

i used the same where codition as drainy suggested

[Ayn]

...instead you are getting what? Hard to debug with just "it worked" or "it didn't work" as feedback. In my opinion you really need to learn debugging, so you can understand and solve issues yourself.

[splunkpoornima]

hi drainy

thanks for ur response ...

i tried with the answer u had given ..but still i am not getting