I'm working on a really large search right now (on the order of 35 lines long). Is there a good way to insert acomment into asearch query to remind a future search editor what is going on?
T...
I would like toaddcommentsto my searches, saved searches, macros and just about anywhere that I write search syntax. I have searches that have dozens of lines and they still call macros to o...
...ake it easier for me tosearch through and edit the file, I'd love it if I could add "comments" to the lookup file. Is this possible? Can we start lines with a ':' or a '#' character or something a...
The Question:
How do I get Splunk toaddacommenttoan existing Jira issue?
Ideally I want to have a Splunk form where a user inputs a Jira issue number and asearch query. Once a day S...
I am copying my dashboard toa new dashboard as I add functionality so I don't destroy the original dashboard. I have discovered that the comments (even though they are within the label as one of t...
...hart:
| inputlookup Migration-Status-All.csv
| search Vendor = "Symantec"
| eval dummy = 'Migration Comments'
| chart count over "Migration Comments" by dummy
How can I change my query to...
I would like to know if it's possible toadda column to the end of my search results with an editable text box in it, so I can addcommentsto specific rows in my output before printing or e...
Hello everybody, using Splunk 8.1.0 and relaterd to https://docs.splunk.com/Documentation/Splunk/8.1.0/Search/Parsingsearches trying toaddcomments via ```my_comment``` tosearch r...
We can addcommentstoa splunk search by using "comment" macro. However to distinguish between SPL and comment, is there any option to change the color for "comment" in SPL query?
Currently we a...
Is it possible toaddacomment field in a Macro so that it is displayed in asearch?
For example, if a macro contains ((host="router1" AND (interface="ethernet0"))
and I want to label that m...