Dashboards & Visualizations

Displaying loading notification on Splunk form searches

pj
Contributor

When i go to a form created in Splunk, enter the criteria required and hit search, there is no notification to inform the user that the search button has been pressed and the search is underway. Instead, the user just sits there thinking 'is splunk doing anything?!'.

Is there anyway to implement some kind of loading message/animation when a user hits search from a form?

Thanks!

1 Solution

sideview
SplunkTrust
SplunkTrust

If you're using the Advanced XML, it's as simple as putting in a JobProgressIndicator module. Typically you put it as a sibling right above your table's paginator module, or right above your FlashChart module. Or you can put in an entire FlashTimeline module, if the interactivity is a bonus. Or for charting views and views designed to run so-called transforming searches, you can put in an EnablePreview module and you'll get updated results rendered every few seconds while the job is running.

However given that you're asking this question, it's very likely that you're using the Simplified XML instead. Unfortunately the Simplified XML's <form> views have nothing like this.

I recommend converting your view to an advanced XML view, or read the embedded walkthrough copy in the ui_examples app and learn how to write your own advanced XML views.

http://answers.splunk.com/questions/1/how-can-i-convert-simple-view-xml-to-advanced-xml

http://splunkbase.splunk.com/apps/All/4.x/Add-On/app:Splunk+UI+examples+app+for+4.1%2B

View solution in original post

sideview
SplunkTrust
SplunkTrust

If you're using the Advanced XML, it's as simple as putting in a JobProgressIndicator module. Typically you put it as a sibling right above your table's paginator module, or right above your FlashChart module. Or you can put in an entire FlashTimeline module, if the interactivity is a bonus. Or for charting views and views designed to run so-called transforming searches, you can put in an EnablePreview module and you'll get updated results rendered every few seconds while the job is running.

However given that you're asking this question, it's very likely that you're using the Simplified XML instead. Unfortunately the Simplified XML's <form> views have nothing like this.

I recommend converting your view to an advanced XML view, or read the embedded walkthrough copy in the ui_examples app and learn how to write your own advanced XML views.

http://answers.splunk.com/questions/1/how-can-i-convert-simple-view-xml-to-advanced-xml

http://splunkbase.splunk.com/apps/All/4.x/Add-On/app:Splunk+UI+examples+app+for+4.1%2B

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...

Global Splunk User Group Events: May + June 2026

Your Splunk Community Awaits: Discover Upcoming User Group Events Worldwide    Staying ahead in the fast-paced ...