https://community.splunk.com/t5/Knowledge-Management/Workflow-Action-bug-when-filtering-via-flashtimeline/m-p/105417#M1069 <P>Hello,</P> <P>I found out a weird behavior that I managed to track down to a possible UI bug.</P> <P><STRONG>Issue:</STRONG> fields passed to workflow action do not match to the actual event that triggered the action. </P> <P><STRONG>Splunk version:</STRONG> 4.3, build 115073 </P> <P><STRONG>How to reproduce:</STRONG></P> <UL> <LI>Define a workflow action to display for an event and associate the URI "<A href="http://www.google.com/search?q=$host$">http://www.google.com/search?q=$host$</A>", get method.</LI> <LI>Perform a search returning several events linked to the workflow action</LI> <LI>filter out the events selecting a time slot in the flashtimeline applet</LI> <LI>start the workflow action on the first event listed after the filtering</LI> </UL> <P><STRONG>Result:</STRONG></P> <P>The workflow action is triggered but the parameters that are passed are returned from the first event of the unfiltered search.</P> <P>Anyone else can confirm this?</P> Fri, 30 Mar 2012 13:48:05 GMT marios_kstone 2012-03-30T13:48:05Z https://community.splunk.com/t5/Knowledge-Management/Workflow-Action-bug-when-filtering-via-flashtimeline/m-p/105417#M1069 <P>Hello,</P> <P>I found out a weird behavior that I managed to track down to a possible UI bug.</P> <P><STRONG>Issue:</STRONG> fields passed to workflow action do not match to the actual event that triggered the action. </P> <P><STRONG>Splunk version:</STRONG> 4.3, build 115073 </P> <P><STRONG>How to reproduce:</STRONG></P> <UL> <LI>Define a workflow action to display for an event and associate the URI "<A href="http://www.google.com/search?q=$host$">http://www.google.com/search?q=$host$</A>", get method.</LI> <LI>Perform a search returning several events linked to the workflow action</LI> <LI>filter out the events selecting a time slot in the flashtimeline applet</LI> <LI>start the workflow action on the first event listed after the filtering</LI> </UL> <P><STRONG>Result:</STRONG></P> <P>The workflow action is triggered but the parameters that are passed are returned from the first event of the unfiltered search.</P> <P>Anyone else can confirm this?</P> Fri, 30 Mar 2012 13:48:05 GMT https://community.splunk.com/t5/Knowledge-Management/Workflow-Action-bug-when-filtering-via-flashtimeline/m-p/105417#M1069 marios_kstone 2012-03-30T13:48:05Z https://community.splunk.com/t5/Knowledge-Management/Workflow-Action-bug-when-filtering-via-flashtimeline/m-p/105418#M1070 <P>Yes - I can confirm the values sent to the worflow action are incorrect (I'm not sure of where they come from) and finding your research in google saved me a lot of time. Thanks!</P> Thu, 09 Aug 2012 19:30:22 GMT https://community.splunk.com/t5/Knowledge-Management/Workflow-Action-bug-when-filtering-via-flashtimeline/m-p/105418#M1070 cneberg 2012-08-09T19:30:22Z