https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91265#M2084 <P>Hi guys,</P> <P>What i am trying to do is to call a savedsearch from an advanced XML file for GoogleMaps<BR /> But due to some reason, the savedsearch doesn't get loaded. Am i missing something here?</P> <P>Please help.</P> <P>Thanks!!</P> <P>&lt;?xml version="1.0"?&gt;<BR /> <VIEW autocancelinterval="100" onunloadcanceljobs="False"><BR /> <LABEL>Google Maps</LABEL><BR /> <MODULE name="AccountBar" layoutpanel="appHeader"></MODULE><BR /> <MODULE name="AppBar" layoutpanel="navigationHeader"></MODULE><BR /> <MODULE name="Message" layoutpanel="messaging"><BR /> <OBJECT><PARAM name="filter" />*<BR /> <PARAM name="clearOnJobDispatch" />False<BR /> <PARAM name="maxSize" />1<BR /> </OBJECT></MODULE></VIEW></P> <P><MODULE name="GoogleMaps" group="Map" layoutpanel="resultsAreaLeft"><BR /> <OBJECT><PARAM name="height" />500px<BR /> <PARAM name="scrollwheel" />off<BR /> <PARAM name="mapStyles" />splunk,roadmap,terrain,satellite<BR /> <PARAM name="mapType" />roadmap<BR /> <PARAM name="drilldown" />true<BR /> <PARAM name="overlay" />clusters<BR /> <PARAM name="overlay.style" />m<BR /> <PARAM name="overlay.opacity" />0.75<BR /> <PARAM name="overlay.rangeMap" />0, 100, 500, 1000, 10000<BR /> <PARAM name="overlay.roundQuantity" />true<BR /> &lt;!-- changes by Alen Starts --&gt;<BR /> <MODULE name="HiddenSearch" autorun="True"><BR /> <PARAM name="search" />| savedsearch Denial_GMap<BR /> <PARAM name="earliest" />-1y<BR /> <MODULE name="JobProgressIndicator"></MODULE><BR /> <MODULE name="SimpleResultsTable"><BR /> <PARAM name="displayRowNumbers" />False<BR /> <PARAM name="drilldown" />row<BR /> <PARAM name="entityName" />results<BR /> </MODULE><BR /> </MODULE><BR /> &lt;!-- changes by Alen Ends flashtimeline layoutPanel="panel_row1_col1" autoRun="True" --&gt;</OBJECT></MODULE></P> Mon, 28 Sep 2020 12:37:52 GMT alenseb 2020-09-28T12:37:52Z https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91265#M2084 <P>Hi guys,</P> <P>What i am trying to do is to call a savedsearch from an advanced XML file for GoogleMaps<BR /> But due to some reason, the savedsearch doesn't get loaded. Am i missing something here?</P> <P>Please help.</P> <P>Thanks!!</P> <P>&lt;?xml version="1.0"?&gt;<BR /> <VIEW autocancelinterval="100" onunloadcanceljobs="False"><BR /> <LABEL>Google Maps</LABEL><BR /> <MODULE name="AccountBar" layoutpanel="appHeader"></MODULE><BR /> <MODULE name="AppBar" layoutpanel="navigationHeader"></MODULE><BR /> <MODULE name="Message" layoutpanel="messaging"><BR /> <OBJECT><PARAM name="filter" />*<BR /> <PARAM name="clearOnJobDispatch" />False<BR /> <PARAM name="maxSize" />1<BR /> </OBJECT></MODULE></VIEW></P> <P><MODULE name="GoogleMaps" group="Map" layoutpanel="resultsAreaLeft"><BR /> <OBJECT><PARAM name="height" />500px<BR /> <PARAM name="scrollwheel" />off<BR /> <PARAM name="mapStyles" />splunk,roadmap,terrain,satellite<BR /> <PARAM name="mapType" />roadmap<BR /> <PARAM name="drilldown" />true<BR /> <PARAM name="overlay" />clusters<BR /> <PARAM name="overlay.style" />m<BR /> <PARAM name="overlay.opacity" />0.75<BR /> <PARAM name="overlay.rangeMap" />0, 100, 500, 1000, 10000<BR /> <PARAM name="overlay.roundQuantity" />true<BR /> &lt;!-- changes by Alen Starts --&gt;<BR /> <MODULE name="HiddenSearch" autorun="True"><BR /> <PARAM name="search" />| savedsearch Denial_GMap<BR /> <PARAM name="earliest" />-1y<BR /> <MODULE name="JobProgressIndicator"></MODULE><BR /> <MODULE name="SimpleResultsTable"><BR /> <PARAM name="displayRowNumbers" />False<BR /> <PARAM name="drilldown" />row<BR /> <PARAM name="entityName" />results<BR /> </MODULE><BR /> </MODULE><BR /> &lt;!-- changes by Alen Ends flashtimeline layoutPanel="panel_row1_col1" autoRun="True" --&gt;</OBJECT></MODULE></P> Mon, 28 Sep 2020 12:37:52 GMT https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91265#M2084 alenseb 2020-09-28T12:37:52Z https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91266#M2085 <P>Before debugging further, I think you should just use the HiddenSavedSearch module, instead of using HiddenSearch with the only purpose of running the <CODE>savedsearch</CODE> command. It's a bit backwards. <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Tue, 16 Oct 2012 08:00:44 GMT https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91266#M2085 Ayn 2012-10-16T08:00:44Z https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91267#M2086 <P>Alright! Thanks!<BR /> What are the Child modules under HiddenSavedSearch?</P> Tue, 16 Oct 2012 08:09:44 GMT https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91267#M2086 alenseb 2012-10-16T08:09:44Z https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91268#M2087 <P>Umm, it depends. You can use all sorts of modules downstream from the HiddenSavedSearch module, but in that sense it is just as HiddenSearch.</P> <P>If you haven't done it already, I advise you to download the UI examples app from splunkbase - it contains lots and lots of useful examples on how to do things like this.</P> Tue, 16 Oct 2012 08:12:10 GMT https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91268#M2087 Ayn 2012-10-16T08:12:10Z https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91269#M2088 <P>i tried UI Examples, but looks they don't have anything related to GoogleMaps.<BR /> Also looks like some of the Params like "<OBJECT><PARAM name="earliest" />-1y" doesn't work under module HiddenSavedSearch</OBJECT></P> Tue, 16 Oct 2012 09:43:31 GMT https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91269#M2088 alenseb 2012-10-16T09:43:31Z https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91270#M2089 <P>The concept of calling a saved search isn't any different just because the GoogleMaps module is involved somewhere. Module documentation is available on docs.splunk.com and in /modules on your Splunk server.</P> Tue, 16 Oct 2012 10:29:08 GMT https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91270#M2089 Ayn 2012-10-16T10:29:08Z https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91271#M2090 <P>advanced XML module you can use.</P> <P>Example :</P> <P><MODULE name="HiddenSearch" layoutpanel="panel_row1_col1" autorun="true"><BR /> <OBJECT><PARAM name="search" />YOUR SEARCH<BR /> <MODULE name="GoogleMaps"><BR /> <PARAM name="height" />700px<BR /> <PARAM name="drilldown" />true<BR /> <PARAM name="drilldown_field" />clientip<BR /> <PARAM name="mapType" />satellite<BR /> <PARAM name="scrollwheel" />off<BR /> <PARAM name="zoomLevel" />3<BR /> <PARAM name="center" />-11.867351, -167.695312<BR /><BR /> </MODULE><BR /> </OBJECT></MODULE></P> Wed, 17 Oct 2012 06:10:13 GMT https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91271#M2090 alenseb 2012-10-17T06:10:13Z https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91272#M2091 <P>If it's your intention that the Google Map should load using the search results of the saved search, then your XML is backwards -- instead of nesting the HiddenSearch inside the GoogleMaps module you go the other way around.</P> Wed, 17 Oct 2012 08:29:06 GMT https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91272#M2091 sideview 2012-10-17T08:29:06Z https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91273#M2092 <P>Yep. I figured that. Thanks!<BR /> Here is the example:<BR /> <MODULE name="HiddenSearch" layoutpanel="panel_row1_col1" autorun="true"> <OBJECT><PARAM name="search" />YOUR SEARCH <MODULE name="GoogleMaps"> <PARAM name="height" />700px <PARAM name="drilldown" />true <PARAM name="drilldown_field" />clientip <PARAM name="mapType" />satellite <PARAM name="scrollwheel" />off <PARAM name="zoomLevel" />3 <PARAM name="center" />-11.867351, -167.695312<BR /> </MODULE> </OBJECT></MODULE></P> Wed, 17 Oct 2012 09:11:07 GMT https://community.splunk.com/t5/Reporting/SavedSearches-Call-from-Advanced-XML/m-p/91273#M2092 alenseb 2012-10-17T09:11:07Z