HI All,
I am new to SPlunk. My colleague who is very experienced in this, had this in his code..
eval runtime="$run.value$"
I searched for the $run.value$ in the code and I couldn't find any. If anyone would please point me to where I can search for this , It will be of great relief. I am guessing this is some env variable, but I am not sure.
Thanks in advance…
dak
2 things:
1) You probably shouldn't post comments as answers, because it confuses things. You can convert your "answer" to a comment by clicking the "more" dropdown and selecting "convert to comment"
2) I'm going to wager a guess and assume it's a dashboard/form definition. Google forms and tokens, and your questions should be answered.
To wager a further guess, I would say that the $run.value$ is defined under a parent module that displays info and then as a drilldown someone clicks a row (or point on graph) and a further display of info comes up based on your clicked value
Hope this helps
it probably is.. I shall check. Thanks,
Is this in a macro definition? or in a dashboard/form definition?