Are you a member of the Splunk Community?
- Find Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- Re: Button click to run a SPL search containing a ...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I need to build a js script that will run a splunk search when I click a button on my dashboard.
The search within the .js file needs to: (1) get a token I have set on the dashboard which is $host_tok$ and (2) append the search results to a kv store (named: collected-data) I already have setup.
I would also like the js script to ask for confirmation (yes/no) "Are you sure you want to add $host_tok$ data to the collected-data kv store?" Clicking yes will run the search. Clicking no will close the notification window.
I have a basic understanding of js, but I don't work with it enough to remember how I would build this script.
dashboard xml:
<form script="run_action_test.js">
<fieldset submitButton="false">
<input id="host" type="dropdown" token="host_tok">
<label>Host</label>
<fieldForLabel>host</fieldForLabel>
<fieldForValue>host</fieldForValue>
<search>
<query>index=main sourcetype=test | stats count by host</query>
<earliest>$time_tok.earliest$</earliest>
<latest>$time_tok.latest$</latest>
</search>
<prefix>host=</prefix>
</input>
<input type="time" token="time_tok">
<label></label>
<default>
<earliest>-7d@h</earliest>
<latest>now</latest>
</default>
</input>
</fieldset>
...
<row>
<panel>
<html
<buttton class="btn btn-primary button1">Copy to KV Store!</button>
</html>
</panel>
</row>
...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@alinadejeu refer to one of my older answers on similar lines https://answers.splunk.com/answers/600664/dashboard-button-to-run-spl-on-click.html
You would need to adjust as per your needs like add Ok/Cancel confirm() box in the JavaScript code.
| makeresults | eval message= "Happy Splunking!!!"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@alinadejeu refer to one of my older answers on similar lines https://answers.splunk.com/answers/600664/dashboard-button-to-run-spl-on-click.html
You would need to adjust as per your needs like add Ok/Cancel confirm() box in the JavaScript code.
| makeresults | eval message= "Happy Splunking!!!"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank I was able to do what I needed with a simple savedsearched for now.
Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...
Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...
Reduce and Transform Your Firewall Data with Splunk Data Management
