Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Search with passed variable (like ldapfilter search="(samaccountname=$user$)") doesn't work when in simple XML

$
0
0

I have a search that works fine:

[search that returns a list of users in a user variable] | domain=MYDOMAIN search="(samaccountname=$user$)ldapfilter" attrs="cn,dn,displayName" works great in search. But when I put the search in a form (simple xml) I get an error, "Search query is not fully resolved."

It appears that the $user$ variable is being interpreted as a token. I've tried to escape $user$ as $user$, but that doesn't work. Please help.


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>