I am working with the collect command an want to set the source to a variable, not a string.
| eval myDynamicSource=index."-".sourcetype
| collect index=garbage source=myDynamicSource
However, the source in the collect is always just the name of the variable even if I use no quotes, double quotes or single quotes.
Any idea what I am missing?
... View more