Archive
Highlighted

Where does 'Search Assistant' get the user search-history from?

Communicator

Where do we actually get user ended search history from to fill the Search Assistant “My Search History”? (4.1)

See snippet...

fillAssistant: function() {
if (!this.assistantEnabled) return false;
if (this.assistantFillPending) {
this.assistantNeedsUpdate = true;
return false;
}

var searchString = this._getUserEnteredSearch();
var namespace = Splunk.util.getCurrentApp();
this.assistantContainer.load(
Splunk.util.make_url('/api/shelper') + '?' +
$.param({
'snippet': 'true',
'namespace': namespace,
'search': searchString,
'useTypeahead': this.getParam(this.TYPEAHEAD_PARAM_KEY),
'useAssistant': this.getParam(this.ASSISTANT_PARAM_KEY)
}),
this.fillAssistantCallback.bind(this)
);
this.assistantFillPending = true;
this.assistantCursor = -1;

return true;
Tags (1)
Highlighted

Re: Where does 'Search Assistant' get the user search-history from?

Splunk Employee
Splunk Employee

This data comes from a combination of:

$SPLUNK_HOME/etc/system/static/bootstrapsearches.txt
$SPLUNK_HOME/var/log/splunk/searches.log
Highlighted

Re: Where does 'Search Assistant' get the user search-history from?

Splunk Employee
Splunk Employee

can the search assistant be disabled by role?

0 Karma