Dashboards & Visualizations

Displaying loading notification on Splunk form searches

pj
Contributor

When i go to a form created in Splunk, enter the criteria required and hit search, there is no notification to inform the user that the search button has been pressed and the search is underway. Instead, the user just sits there thinking 'is splunk doing anything?!'.

Is there anyway to implement some kind of loading message/animation when a user hits search from a form?

Thanks!

1 Solution

sideview
SplunkTrust
SplunkTrust

If you're using the Advanced XML, it's as simple as putting in a JobProgressIndicator module. Typically you put it as a sibling right above your table's paginator module, or right above your FlashChart module. Or you can put in an entire FlashTimeline module, if the interactivity is a bonus. Or for charting views and views designed to run so-called transforming searches, you can put in an EnablePreview module and you'll get updated results rendered every few seconds while the job is running.

However given that you're asking this question, it's very likely that you're using the Simplified XML instead. Unfortunately the Simplified XML's <form> views have nothing like this.

I recommend converting your view to an advanced XML view, or read the embedded walkthrough copy in the ui_examples app and learn how to write your own advanced XML views.

http://answers.splunk.com/questions/1/how-can-i-convert-simple-view-xml-to-advanced-xml

http://splunkbase.splunk.com/apps/All/4.x/Add-On/app:Splunk+UI+examples+app+for+4.1%2B

View solution in original post

sideview
SplunkTrust
SplunkTrust

If you're using the Advanced XML, it's as simple as putting in a JobProgressIndicator module. Typically you put it as a sibling right above your table's paginator module, or right above your FlashChart module. Or you can put in an entire FlashTimeline module, if the interactivity is a bonus. Or for charting views and views designed to run so-called transforming searches, you can put in an EnablePreview module and you'll get updated results rendered every few seconds while the job is running.

However given that you're asking this question, it's very likely that you're using the Simplified XML instead. Unfortunately the Simplified XML's <form> views have nothing like this.

I recommend converting your view to an advanced XML view, or read the embedded walkthrough copy in the ui_examples app and learn how to write your own advanced XML views.

http://answers.splunk.com/questions/1/how-can-i-convert-simple-view-xml-to-advanced-xml

http://splunkbase.splunk.com/apps/All/4.x/Add-On/app:Splunk+UI+examples+app+for+4.1%2B

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...