Hi I am currently working on a similar task that passing the formatted block value to Splunk query to get an out put required for the next action. My search query |inputlookup agentid.csv | search hostname=hostname1| fields agentid My format block configured as below, Template {0} Template Parameters 0 = get_variables_2:action_result.data.*.Computer ID Can you please advise me how to pass this computer ID to my Splunk query as mentioned above?
... View more