topic Re: List all tags in Splunk Search

List all tags

bababou — Fri, 07 Feb 2014 20:53:40 GMT

Hi,

I tagged several eventtypes and I'd like to know if it is possible to display a list of all these tags in the same way the "summary" page lists all the sources, sourcetypes and hosts.

Thanks.

Re: List all tags

somesoni2 — Fri, 07 Feb 2014 21:03:19 GMT

http://answers.splunk.com/answers/6989/listing-all-tags-in-the-search-interface

Re: List all tags

martin_mueller — Fri, 07 Feb 2014 21:05:05 GMT

You can query for a list of tags like this:

| rest /services/search/tags

In order to get a clickable entry point for kicking off a new search you'll need to build a panel in some view around those search results and define an appropriate drilldown.

Edit: If you can get the tags command suggested by @somesoni2 to work then that's probably the nicer way.

Re: List all tags

bababou — Mon, 10 Feb 2014 09:04:55 GMT

rest looks promising, except that I don't see any of my tags created in my application even if they are all world-readable.

Re: List all tags

bababou — Mon, 10 Feb 2014 09:06:45 GMT

By the way, they all contain the symbol -, could this be a problem ?

Re: List all tags

martin_mueller — Mon, 10 Feb 2014 11:46:57 GMT

For visibility issues, take a look at http://docs.splunk.com/Documentation/Splunk/latest/RESTAPI/RESTresources#servicesNS_endpoints

The - shouldn't be an issue.

Re: List all tags

bababou — Thu, 13 Feb 2014 12:46:05 GMT

Perfect ! Everything works fine, thanks.