Where do we actually get user ended search history from to fill the Search Assistant “My Search History”? (4.1)
See snippet...
fillAssistant: function() {
if (!this.assistantEnabled) return false;
if (this.assistantFillPending) {
this.assistantNeedsUpdate = true;
return false;
}
var searchString = this._getUserEnteredSearch();
var namespace = Splunk.util.getCurrentApp();
this.assistantContainer.load(
Splunk.util.make_url('/api/shelper') + '?' +
$.param({
'snippet': 'true',
'namespace': namespace,
'search': searchString,
'useTypeahead': this.getParam(this.TYPEAHEAD_PARAM_KEY),
'useAssistant': this.getParam(this.ASSISTANT_PARAM_KEY)
}),
this.fillAssistantCallback.bind(this)
);
this.assistantFillPending = true;
this.assistantCursor = -1;
return true;
can the search assistant be disabled by role?
This data comes from a combination of:
$SPLUNK_HOME/etc/system/static/bootstrapsearches.txt
$SPLUNK_HOME/var/log/splunk/searches.log