Searching Macros
Something like this would be nice:
Search macros are chunks of a search that you can reuse in multiple places, including saved and ad hoc searches. Search macros can be any part of a search, such as an eval statement or search term, and do not need to be a complete command. You can also specify whether or not the macro field takes any arguments.
REF# http://docs.splunk.com/Documentation/Splunk/6.1/Search/Usesearchmacros
It would be awesome if we could do this, it might help enforce better searching behaviour amongst our more careless users too...
Tx Bronwyn.
Please sign in to leave a comment.
Comments
0 comments