<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to: Splunk without any formatting? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-Splunk-without-any-formatting/m-p/118535#M31657</link>
    <description>&lt;P&gt;Hello,&lt;/P&gt;

&lt;P&gt;So I have written a very simple Django app that displays a basic HTML and CSS webpage. The only reference to splunk is "{% load splunkmvc %}" at the top of my home.html. What I want is the ability to &lt;STRONG&gt;perform searches on this page and display the results in plain text only&lt;/STRONG&gt;, no splunk formatting or styling at all.&lt;/P&gt;

&lt;P&gt;Right now If I add a query in the {% block managers%} section and reference that query in the HTML I get no results. However, If I add {% extends "splunkdj:base_with_basic_styles.html" %} then the query will work and return results...only they are formated by splunk. Rather than just giving me the single value I want it generates several div's nested in each other and imposes several CSS classes on them from some place I've never referenced producing a large box on my webpage with bold text displaying the result.&lt;/P&gt;

&lt;P&gt;What are the bare minimum requirements to perform a splunk search? (ie. a couple JavaScript files I could include in the {% block js %} or something of the sort)&lt;/P&gt;

&lt;P&gt;Is this even possible?&lt;/P&gt;

&lt;P&gt;Thanks&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;Here is my search:&lt;/STRONG&gt;&lt;/P&gt;

&lt;P&gt;{% block managers%}&lt;BR /&gt;
    {% searchmanager&lt;BR /&gt;
        id="search_total"&lt;BR /&gt;
        search="| metadata type=sourcetypes index=* | stats sum(totalCount)"&lt;BR /&gt;
     %}&lt;BR /&gt;
{% endblock managers%}&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;Here is how I reference it within the body of the HTML:&lt;/STRONG&gt;&lt;/P&gt;

&lt;P&gt;{% single id="total" managerid="search_total" %} total events.&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;This is what I have to add to the HTML to get results (also produces undesired formatting):&lt;/STRONG&gt;&lt;/P&gt;

&lt;P&gt;{% extends "splunkdj:base_with_basic_styles.html" %}&lt;/P&gt;</description>
    <pubDate>Mon, 28 Sep 2020 20:01:14 GMT</pubDate>
    <dc:creator>bkeif</dc:creator>
    <dc:date>2020-09-28T20:01:14Z</dc:date>
    <item>
      <title>How to: Splunk without any formatting?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-Splunk-without-any-formatting/m-p/118535#M31657</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;

&lt;P&gt;So I have written a very simple Django app that displays a basic HTML and CSS webpage. The only reference to splunk is "{% load splunkmvc %}" at the top of my home.html. What I want is the ability to &lt;STRONG&gt;perform searches on this page and display the results in plain text only&lt;/STRONG&gt;, no splunk formatting or styling at all.&lt;/P&gt;

&lt;P&gt;Right now If I add a query in the {% block managers%} section and reference that query in the HTML I get no results. However, If I add {% extends "splunkdj:base_with_basic_styles.html" %} then the query will work and return results...only they are formated by splunk. Rather than just giving me the single value I want it generates several div's nested in each other and imposes several CSS classes on them from some place I've never referenced producing a large box on my webpage with bold text displaying the result.&lt;/P&gt;

&lt;P&gt;What are the bare minimum requirements to perform a splunk search? (ie. a couple JavaScript files I could include in the {% block js %} or something of the sort)&lt;/P&gt;

&lt;P&gt;Is this even possible?&lt;/P&gt;

&lt;P&gt;Thanks&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;Here is my search:&lt;/STRONG&gt;&lt;/P&gt;

&lt;P&gt;{% block managers%}&lt;BR /&gt;
    {% searchmanager&lt;BR /&gt;
        id="search_total"&lt;BR /&gt;
        search="| metadata type=sourcetypes index=* | stats sum(totalCount)"&lt;BR /&gt;
     %}&lt;BR /&gt;
{% endblock managers%}&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;Here is how I reference it within the body of the HTML:&lt;/STRONG&gt;&lt;/P&gt;

&lt;P&gt;{% single id="total" managerid="search_total" %} total events.&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;This is what I have to add to the HTML to get results (also produces undesired formatting):&lt;/STRONG&gt;&lt;/P&gt;

&lt;P&gt;{% extends "splunkdj:base_with_basic_styles.html" %}&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 20:01:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-Splunk-without-any-formatting/m-p/118535#M31657</guid>
      <dc:creator>bkeif</dc:creator>
      <dc:date>2020-09-28T20:01:14Z</dc:date>
    </item>
    <item>
      <title>Re: How to: Splunk without any formatting?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-Splunk-without-any-formatting/m-p/118536#M31658</link>
      <description>&lt;P&gt;You can do the entire search manager creation and result handling with Javascript. You should check out &lt;A href="http://dev.splunk.com/view/webframework-splunkjsstack/SP-CAAAESV"&gt;this overview&lt;/A&gt; and from there do the tutorials on the right to see how it works.&lt;/P&gt;</description>
      <pubDate>Thu, 21 May 2015 11:53:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-Splunk-without-any-formatting/m-p/118536#M31658</guid>
      <dc:creator>jeffland</dc:creator>
      <dc:date>2015-05-21T11:53:05Z</dc:date>
    </item>
    <item>
      <title>Re: How to: Splunk without any formatting?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-Splunk-without-any-formatting/m-p/118537#M31659</link>
      <description>&lt;P&gt;Thank you much for your reply. I will look into this as work allows.&lt;/P&gt;

&lt;P&gt;Update: Much appreciated! This appears to be exactly what I was looking for. I'm not sure how I missed it during my documentation perusing.&lt;/P&gt;</description>
      <pubDate>Tue, 26 May 2015 13:01:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-Splunk-without-any-formatting/m-p/118537#M31659</guid>
      <dc:creator>bkeif</dc:creator>
      <dc:date>2015-05-26T13:01:02Z</dc:date>
    </item>
  </channel>
</rss>

