Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Search Event Handler not being executed...

$
0
0
I am using Splunk Enterprise 6.4.7. Created a dashboard panel. I want to include the number of results in the panel title. I'm trying to use the job.resultCount token in the event handler. I've also tried to use This is my panel:
$numSrchResults$ Results Returnedindex=foo | table _time, name, bar, foobar$timer_tok.earliest$$timer_tok.latest$'job.resultCount'
My search returns about 35 results in the table. However, the token `$numSrchResults$` never gets set. I've tried several different things: `$job.resultCount$`, `'job.resultCount'`, using `` instead of ``, specifying a match condition, using finalize instead of done. None of these work. Any ideas?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>