Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Pass a run time variable in spunk

$
0
0
I have the following query where $eventBreakdownDateTime$ is a selection input which I want to assign it to a variable called `temp` AppDomain="AutomationServer" UserName=* Token=* | spath output=Message path=Message | fieldformat EventDateTime=strftime(_time,"%Y%d%m%H%M%S%3N") | eval temp = $eventBreakdownDateTime$ | table Message, _time, EventDateTime, SelectedDate, temp This is giving me an error `Error in eval: the expression is malformed`

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>