hi, i'm trying to use an eval variable in my search. i've tried many different things and i've failed, and i'm sure this is a quick easy solution but i just can't seem to get it. my eval variables p...
See more...
hi, i'm trying to use an eval variable in my search. i've tried many different things and i've failed, and i'm sure this is a quick easy solution but i just can't seem to get it. my eval variables print out exactly as i need, i have validated it with the table as well as manually put it in the search as well. | eval z="legolas,TGZ,ux*"
| eval name="*" + mvindex(split(z, ","), 0) + "*"
| eval type=mvindex(split(z, ","), 1)
| eval query="*" + mvindex(split(z, ","), 2)
| eval searchVar=if(type="JAR", name, query)
| table name, type, query, searchVar
| search artifactory=* uri=searchVar