All Apps and Add-ons

Redirector and flashtimeline error

tmurray3
Path Finder

I have a simple results table containing hostnames, and when I click a row in the table, I want to popup a window and do a search based on the hostname. First issue, is the window does not popup, it displays in the current window. Secondly, a red error at the top of the search screen states "Search operation 'index' is unknown. You might not have permission to run this operation."

The search query is defined as: index=iam_af host=croshrspax01

The results are displayed correctly, however not sure why there is an error message.

I am using IE6 and Splunk 4.2.1

Here is the code:

    <view autoCancelInterval="90" isVisible="true"
onunloadCancelJobs="true" template="dashboard.html"
isSticky="False">
  <label>AF Details</label>
  <module name="AccountBar" layoutPanel="appHeader" />
  <module name="AppBar" layoutPanel="appHeader" />
  <module name="SideviewUtils" layoutPanel="appHeader" />
  <module name="Message" layoutPanel="messaging">
    <param name="filter">*</param>
    <param name="maxSize">2</param>
    <param name="clearOnJobDispatch">False</param>
  </module>
  <module name="HTML" layoutPanel="viewHeader">
    <param name="html">
      <![CDATA[
    <h1>AF Details    ]]>
</param>
  </module>

<module name="HiddenSavedSearch" layoutPanel="panel_row1_col1" autoRun="True">
    <param name="savedSearch">AF-Search-CroydonHosts </param>
        <module name="HTML" >
            <param name="html"><![CDATA[
            <h1>DataCenter Croydon</h1>
            ]]>

        </param>
    </module>

      <module name="JobProgressIndicator"></module>

    <module name="Pager">
                 <param name="entityName">results</param>

            <module name="SimpleResultsTable">
                    <param name="entityName">results</param>
                     <param name="drilldown">row</param>

                   <module name="Redirector">
                         <param name="url">flashtimeline</param>
                         <param name="arg.q">index=iam_af host=$click.value$</param>
                         <param name="arg.earliest">rt-5m</param>
                         <param name="arg.latest">rt</param>
                         <param name="arg.popup">true</param>

                   </module>



                  </module>
        <module name="Pager">
          <param name="entityName">results</param>
        </module>
</module>
</module>


</view>
Tags (1)
1 Solution

sideview
SplunkTrust
SplunkTrust

The first problem is that the flashtimeline view requires that the initial 'search' command be specified before your searchterms. Change your arg.q value to have a prepended 'search'.

And the second problem is simply that you want <param name="popup"> not <param name="arg.popup">. Because of how Redirector works, the former is it's 'popup' param, determining whether or not the link should load in a popup window. And the latter is simply a directive that the Redirector should put &popup=true into the URL that the user is sent to.

Note also that the legal values for the 'popup' param are True and False and they are case sensitive.

View solution in original post

0 Karma

sideview
SplunkTrust
SplunkTrust

The first problem is that the flashtimeline view requires that the initial 'search' command be specified before your searchterms. Change your arg.q value to have a prepended 'search'.

And the second problem is simply that you want <param name="popup"> not <param name="arg.popup">. Because of how Redirector works, the former is it's 'popup' param, determining whether or not the link should load in a popup window. And the latter is simply a directive that the Redirector should put &popup=true into the URL that the user is sent to.

Note also that the legal values for the 'popup' param are True and False and they are case sensitive.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...