All Apps and Add-ons

How do i get parameter by URLLoader and HiddenSearch?

ilove275
Path Finder

-----------------Send eventName modules---------------

true
search_test2
$click.fields.EventName$

Below is a link from a view .

http://localhost:8000/app/testApp/testView?***event***="eventName"

How do i get parameter by URLLoader and HiddenSearch ?





index=tms_header EventName="event" OrgName="$OrgName$" AttackerIP=$AttackerIP$ VictimIP=$VictimIP$
|table Time ID OrgName SensorIP EventName ATTACK_NAME AttackerIP AttackerPort VictimIP VictimPort Count

OrgName_setting



ALL


ORG_1
ORG_1


ORG_2
ORG_2


False

ORGName:

OrgName_setting

stringreplace



True
$target$




AttackerIP :


stringreplace


True












VictimIP :
*

stringreplace


True











False

True
Search


100
results

True
False

100
row
True


flashtimeline




flashtimeline












0 Karma

ilove275
Path Finder

thanks for your help

0 Karma

sideview
SplunkTrust
SplunkTrust

Well it would be strange to use URLLoader with HiddenSearch. I think what you mean is using URLLoader with the Search module.

There are a couple problems with this configuration, and I think you should check out the Sideview Utils documentation a bit more. You're using ViewRedirector here instead of Redirector, and using HiddenSearch instead of Search.

But in a nutshell URLLoader takes the arguments from the URL and makes them available to all the modules downstream (ie nested inside URLLoader). So for example you would put a Search module downstream from the URLLaoder, and then you put $event$ somewhere in its 'search' param.

But the documentation goes into more detail than this and provides several examples.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...