All Apps and Add-ons

Multiple TextField

menkurau
Path Finder

I would like to use 2 texfield modules to create a start and end date that is passed to a custom search as arguments. I have only been able to pass a single value thus far from two textfields. Here is an excerpt of the XML

<module name="TextField" layoutPanel="panel_row1_col1" autoRun="True">
  <param name="name">timestamp</param>
  <param name="float">left</param>
  <param name="template">$value$</param>
  <param name="label">Choose today's date (yyyy-mm-dd):</param>
  <param name="default">2013-02-25</param>
  <module name="TextField" autoRun="True">
    <param name="name">timestamp2</param>
    <param name="float">left</param>
    <param name="template">$value$</param>
    <param name="label">Choose future date (yyyy-mm-dd):</param>
    <param name="default">2013-02-25</param>
  </module>
  <module name="SubmitButton">
    <param name="allowSoftSubmit">True</param>
    <module name="Search" layoutPanel="panel_row2_col1" group="Previous Incidents" autoRun="True">
      <param name="search">| script sqlConnInP $timestamp$ $timestamp2$</param>

menkurau
Path Finder

I figured it out, I needed to properly nest the subsequent searches in the submitbutton module.

0 Karma

menkurau
Path Finder

Thanks for the tip! I removed the extra autoRuns as suggested.

0 Karma

sideview
SplunkTrust
SplunkTrust

Yep. I cleaned up your indentation and it became easy to see. Also never nest an autoRun="True" inside another autoRun="True". In this config there should only be one, and it should be on the topmost module -the first TextField. Although it probably wasn't doing specific harm in this particular config, one autoRun nested inside another can wreak havoc and there's never any purpose to doing it.

0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...