Dashboards & Visualizations

Create Submit Button in XML to run the search?

chitreshakumar
Communicator

I have 6 multi-select input in my dashboard .Whenever I select one of the values the search starts running but I want a"Submit" button to control the search so that my tables and graphs load after I click on the submit button ??

0 Karma
1 Solution

hardikJsheth
Motivator

Set autoRun parameter to false as follows :

<fieldset autoRun="false" submitButton="true">

View solution in original post

harsmarvania57
Ultra Champion

You need to enable submit button and disable searchWhenChanged

Like this

  <fieldset submitButton="true" autoRun="false">
    <input type="multiselect" token="field1" searchWhenChanged="false">

chitreshakumar
Communicator

Can you elaborate since I think this is what I want?

0 Karma

harsmarvania57
Ultra Champion

First line enable Submit button based on code submitButton="true" and secondline is MultiSelect input with token as field1 but searchWhenChanged="false" this code will disable execution of search query when you select, deselect Multiselect input means you can do N number of selection and query will not execute while doing selection, query will execute only when you will click Submit button.

I hope this helps.

0 Karma

chitreshakumar
Communicator

One more thing I have 6 input but I need only one submit button do I need to add
<fieldset submitButton="true" autoRun="false">
before each input or only once before the start of the input in the panel??

0 Karma

harsmarvania57
Ultra Champion

<fieldset submitButton="true" autoRun="false"> will be used only once in Dashboard.

Please see sample dashboard XML with 2 multiselect input

<form>
  <label>test</label>
  <fieldset submitButton="true" autoRun="false">
    <input type="multiselect" token="field1" searchWhenChanged="false">
      <label>field1</label>
      <choice value="sourcetype">Sourcetype</choice>
      <search>
        <query/>
        <earliest>-24h@h</earliest>
        <latest>now</latest>
      </search>
      <delimiter> </delimiter>
    </input>
    <input type="multiselect" token="field2" searchWhenChanged="false">
      <label>field2</label>
      <choice value="host">Host</choice>
      <delimiter> </delimiter>
    </input>
  </fieldset>
  <row>
    <panel>
      <table>
        <search>
          <query>index=_internal | stats count by $field1$, $field2$</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
      </table>
    </panel>
  </row>
</form>
0 Karma

hardikJsheth
Motivator

Set autoRun parameter to false as follows :

<fieldset autoRun="false" submitButton="true">

chitreshakumar
Communicator

Can you elaborate as I am new to this??

0 Karma

Padma12345
Explorer

thanks a lot

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...