<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to validate multiple parameters in an alert action? in Reporting</title>
    <link>https://community.splunk.com/t5/Reporting/How-to-validate-multiple-parameters-in-an-alert-action/m-p/494269#M7912</link>
    <description>&lt;P&gt;Glad to know that it worked.&lt;/P&gt;</description>
    <pubDate>Wed, 06 May 2020 12:35:31 GMT</pubDate>
    <dc:creator>harsmarvania57</dc:creator>
    <dc:date>2020-05-06T12:35:31Z</dc:date>
    <item>
      <title>How to validate multiple parameters in an alert action?</title>
      <link>https://community.splunk.com/t5/Reporting/How-to-validate-multiple-parameters-in-an-alert-action/m-p/494264#M7907</link>
      <description>&lt;P&gt;Here is my restmap.conf&lt;/P&gt;
&lt;PRE&gt;&lt;CODE&gt;[validation:savedsearch]

# Check for empty feed
action.myApp= case('action.myApp' != "1", null(), 'action.myApp.param.feed' == "action.myApp.param.feed" OR 'action.myApp.param.feed' == "", "Feed cannot be empty.",  1==1, null())

# Check for empty instance
action.myApp= case('action.myApp' != "1", null(), 'action.myApp.param.instance' == "action.myApp.param.instance" OR 'action.myApp.param.instance' == "", "Instance cannot be empty.",  1==1, null())

# Check for SSL
action.myApp= case('action.myApp' != "1", null(), 'action.myApp.param.ssl' == "1" AND 'action.myApp.param.cert' == "action.myApp.param.cert", "Cert path cannot be empty when SSL checked.", 'action.myApp.param.ssl' == "1" AND 'action.myApp.param.cert' == "", "Cert path cannot be empty when SSL checked.",  1==1, null())

# Check for feed regex
action.myApp.param.feed = validate( match('action.myApp.param.feed', "^[A-Z0-9_-]{3,}$"), "Feed is invalid, see regex for detail.")

# Check for instance regex
action.myApp.param.instance = validate( match('action.myApp.param.instance', "^https?:\/\/([a-zA-Z]+|\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}):\d+([\/\w]*)?$"), "Instance is invalid, see regex for detail.")
&lt;/CODE&gt;&lt;/PRE&gt;
&lt;P&gt;Everything works as expected if I comment out the &lt;STRONG&gt;check for SSL&lt;/STRONG&gt; line, however as soon as I uncomment that line, I can save the alert even if all of the fields have no values.&lt;/P&gt;
&lt;P&gt;How can I get this to work?&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;action.myApp.param.ssl&lt;/STRONG&gt; is a checkbox&lt;BR /&gt;&lt;STRONG&gt;action.myApp.param.cert&lt;/STRONG&gt; is a string input&lt;/P&gt;</description>
      <pubDate>Mon, 08 Jun 2020 20:46:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/How-to-validate-multiple-parameters-in-an-alert-action/m-p/494264#M7907</guid>
      <dc:creator>boz_8058</dc:creator>
      <dc:date>2020-06-08T20:46:29Z</dc:date>
    </item>
    <item>
      <title>Re: How to validate multiple parameters in an alert action?</title>
      <link>https://community.splunk.com/t5/Reporting/How-to-validate-multiple-parameters-in-an-alert-action/m-p/494265#M7908</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;Can you please provide your html code for &lt;CODE&gt;checkbox&lt;/CODE&gt; ?&lt;/P&gt;</description>
      <pubDate>Wed, 06 May 2020 11:21:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/How-to-validate-multiple-parameters-in-an-alert-action/m-p/494265#M7908</guid>
      <dc:creator>harsmarvania57</dc:creator>
      <dc:date>2020-05-06T11:21:21Z</dc:date>
    </item>
    <item>
      <title>Re: How to validate multiple parameters in an alert action?</title>
      <link>https://community.splunk.com/t5/Reporting/How-to-validate-multiple-parameters-in-an-alert-action/m-p/494266#M7909</link>
      <description>&lt;P&gt;Here are both checkbox and cert path&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;         &amp;lt;div class="control-group"&amp;gt;
            &amp;lt;label class="control-label" for="ssl"&amp;gt;Send using SSL?&amp;lt;/label&amp;gt;
            &amp;lt;div class="controls"&amp;gt;
                &amp;lt;label class="checkbox" for="ssl"&amp;gt;
                  &amp;lt;input id="ssl" type="checkbox" name="action.myApp.param.ssl" value="1" /&amp;gt;
                &amp;lt;/label&amp;gt;
            &amp;lt;/div&amp;gt;
        &amp;lt;/div&amp;gt;
        &amp;lt;div class="control-group"&amp;gt;
            &amp;lt;label class="control-label" for="cert"&amp;gt;Certificate Path&amp;lt;/label&amp;gt;
            &amp;lt;div class="controls"&amp;gt;
                &amp;lt;input type="text" class="input-xlarge" name="action.myApp.param.cert" id="cert"  placeholder="Full path to certificate" /&amp;gt;
            &amp;lt;/div&amp;gt;
        &amp;lt;/div&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Wed, 06 May 2020 11:36:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/How-to-validate-multiple-parameters-in-an-alert-action/m-p/494266#M7909</guid>
      <dc:creator>boz_8058</dc:creator>
      <dc:date>2020-05-06T11:36:15Z</dc:date>
    </item>
    <item>
      <title>Re: How to validate multiple parameters in an alert action?</title>
      <link>https://community.splunk.com/t5/Reporting/How-to-validate-multiple-parameters-in-an-alert-action/m-p/494267#M7910</link>
      <description>&lt;P&gt;Can you please try below&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[validation:savedsearch]
action.myApp= case('action.myApp' != "1", null(), 'action.myApp.param.feed' == "action.myApp.param.feed" OR 'action.myApp.param.feed' == "", "Feed cannot be empty.", 'action.myApp.param.instance' == "action.myApp.param.instance" OR 'action.myApp.param.instance' == "", "Instance cannot be empty.", 'action.myApp.param.ssl' == "1" AND ('action.myApp.param.cert' == "action.myApp.param.cert" OR 'action.myApp.param.cert' == ""), "Cert path cannot be empty when SSL checked.", 1==1, null())

# Check for feed regex
action.myApp.param.feed = validate( match('action.myApp.param.feed', "^[A-Z0-9_-]{3,}$"), "Feed is invalid, see regex for detail.")

# Check for instance regex
action.myApp.param.instance = validate( match('action.myApp.param.instance', "^https?:\/\/([a-zA-Z]+|\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}):\d+([\/\w]*)?$"), "Instance is invalid, see regex for detail.")
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Wed, 06 May 2020 11:42:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/How-to-validate-multiple-parameters-in-an-alert-action/m-p/494267#M7910</guid>
      <dc:creator>harsmarvania57</dc:creator>
      <dc:date>2020-05-06T11:42:13Z</dc:date>
    </item>
    <item>
      <title>Re: How to validate multiple parameters in an alert action?</title>
      <link>https://community.splunk.com/t5/Reporting/How-to-validate-multiple-parameters-in-an-alert-action/m-p/494268#M7911</link>
      <description>&lt;P&gt;Works, thank you&lt;/P&gt;</description>
      <pubDate>Wed, 06 May 2020 12:33:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/How-to-validate-multiple-parameters-in-an-alert-action/m-p/494268#M7911</guid>
      <dc:creator>boz_8058</dc:creator>
      <dc:date>2020-05-06T12:33:29Z</dc:date>
    </item>
    <item>
      <title>Re: How to validate multiple parameters in an alert action?</title>
      <link>https://community.splunk.com/t5/Reporting/How-to-validate-multiple-parameters-in-an-alert-action/m-p/494269#M7912</link>
      <description>&lt;P&gt;Glad to know that it worked.&lt;/P&gt;</description>
      <pubDate>Wed, 06 May 2020 12:35:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/How-to-validate-multiple-parameters-in-an-alert-action/m-p/494269#M7912</guid>
      <dc:creator>harsmarvania57</dc:creator>
      <dc:date>2020-05-06T12:35:31Z</dc:date>
    </item>
  </channel>
</rss>

