topic Re: entitySelectLister entityPath have to be a saved search? in Dashboards & Visualizations

entitySelectLister entityPath have to be a saved search?

hiddenkirby — Wed, 02 Jun 2010 01:49:19 GMT

When using an entitySelectLister ... does the entityPath have to be a saved search name? or can i use a searchTemplate or something equiv.

Re: entitySelectLister entityPath have to be a saved search?

gkanapathy — Wed, 02 Jun 2010 06:26:07 GMT

It needs to be the virtual "path" of a Splunk object type or type. This can be a specific object, or the parent path (relative to the root of the services namespace). So for example saved/searches, saved/eventtypes, data/indexes. The path is the one you'd use to enumerate the object(s) under the REST API (relative to the namespace root again).

Re: entitySelectLister entityPath have to be a saved search?

hiddenkirby — Wed, 02 Jun 2010 22:24:40 GMT

how would one figure this out on his own? other than trying to interpret examples in search?

Re: entitySelectLister entityPath have to be a saved search?

hiddenkirby — Wed, 02 Jun 2010 22:25:06 GMT

is there any specific documentation?

Re: entitySelectLister entityPath have to be a saved search?

gkanapathy — Wed, 02 Jun 2010 22:45:33 GMT

Closest is http://www.splunk.com/base/Documentation/4.1.2/Developer/ModuleReference#EntitySelectLister is the closest, and notes that entityPath should be a valid entity path such as saved/searches. http://www.splunk.com/base/Documentation/4.1.2/Developer/HowToUseListers#EntityLinkLister mentions use to access objects via REST endpoints. However, the REST management API (as opposed to the query API) is not currently published though it can be browsed on https://splunkhost:8089/services

Re: entitySelectLister entityPath have to be a saved search?

hiddenkirby — Wed, 02 Jun 2010 22:47:13 GMT

or maybe where i can find the entity "admin/distsearch-peer" .. maybe then i can try to backwards-translate some of this advanced xml.

Re: entitySelectLister entityPath have to be a saved search?

hiddenkirby — Wed, 02 Jun 2010 22:47:50 GMT

oh ok this is helpful... thank you 🙂