Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

passing a query string as token

$
0
0
how to extract the query stored in form of a key value pair in a lookup and execute the query in a single go in search app. For ex- |makeresults|eval field1= "index=*|stats count "| --> how can we pass the value in filed1 which is a query and execute it within the same search. Please help: @somesoni2 @woodcock @martin_mueller @niketnilay

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>