Search feed by hiddensearch

fbl_itcs — Fri, 08 Nov 2013 13:13:06 GMT

Hi,

I have a form where one enters an IP address. This address is used by several searches to fill the dashboard panels. For one panel I need the dns name and not the IP address for the search. Is it possible to do a hidden search first (and do the nslookup) and use this information inside the main search?

I can't do the nslookup inside my main search because the main search starts with a custom command that HAS to be the first command.

Thanks for your help!

Kind regards,
Felix

Re: Search feed by hiddensearch

somesoni2 — Fri, 08 Nov 2013 14:34:24 GMT

You could add a Search module and a ResultValueSetter module to have a variable. The only thing to ensure here is the panel which will be using this should be defined within scope of this search and resultvaluesetter. This search will be hidden.

<module name="Search">
    <param name="search">
*|head 1| eval hostIp="$YourIPTextBoxName$" | table hostIp  | lookup dnslookup clientip as hostIp |rename clienthost as HostName|table HostName
    </param>                
    <module name="ResultsValueSetter">
        <param name="fields">HostName</param>
        ...
        ...
        <module name="Search" layoutPanel="panel_row2_col1">
        ...Your Search Code Here
        </module>
        ...
        ...
    </module>
</module>

topic Search feed by hiddensearch in Dashboards & Visualizations

Search feed by hiddensearch

Re: Search feed by hiddensearch