All Apps and Add-ons

Splunk addon builder - How to create an input that shows list of indexes?

ramesh_babu71
Path Finder

Hello,

I have a requirement in new app being build using add-on builder create a input parameter called choose index. This parameter should show the list of avalable indexes from which an user selects one index.

I don't see this option in Splunk Add-on builder helper functions. However, Splunk doc does show such option in a picture just above the section called Pass values from data input parameters
https://docs.splunk.com/Documentation/AddonBuilder/2.2.0/UserGuide/ConfigureDataCollectionAdvanced

Another pic from an add-on which have this feature
alt text

Can anyone help me on this please?

0 Karma

smitra_splunk
Splunk Employee
Splunk Employee

@ramesh_babu71
I think this might help you. Use a query to populate in the dropdown, like given in the answers in the link below.
https://answers.splunk.com/answers/39370/is-it-possibl-to-get-a-list-of-available-indices.html

0 Karma

chli_splunk
Splunk Employee
Splunk Employee

Sorry AoB havent supported this feature yet. Currently you have to hardcode values for a dropdown component in UI, rather than getting indexers during run-time by some Python codes.

0 Karma

ramesh_babu71
Path Finder

Thanks for the update chli_splunk.

I do see that the option of drop down list of index is not available for the section Alert Actions. But it is there in Data Collection of AoB

Hard-coding index values doesn't serve the purpose as client will add/remove indexes in future. Meanwhile I added a new global text field called Index. Client is okay with this approach.

Regards,
Ramesh Babu

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...