Dashboards & Visualizations

Displaying loading notification on Splunk form searches

pj
Contributor

When i go to a form created in Splunk, enter the criteria required and hit search, there is no notification to inform the user that the search button has been pressed and the search is underway. Instead, the user just sits there thinking 'is splunk doing anything?!'.

Is there anyway to implement some kind of loading message/animation when a user hits search from a form?

Thanks!

1 Solution

sideview
SplunkTrust
SplunkTrust

If you're using the Advanced XML, it's as simple as putting in a JobProgressIndicator module. Typically you put it as a sibling right above your table's paginator module, or right above your FlashChart module. Or you can put in an entire FlashTimeline module, if the interactivity is a bonus. Or for charting views and views designed to run so-called transforming searches, you can put in an EnablePreview module and you'll get updated results rendered every few seconds while the job is running.

However given that you're asking this question, it's very likely that you're using the Simplified XML instead. Unfortunately the Simplified XML's <form> views have nothing like this.

I recommend converting your view to an advanced XML view, or read the embedded walkthrough copy in the ui_examples app and learn how to write your own advanced XML views.

http://answers.splunk.com/questions/1/how-can-i-convert-simple-view-xml-to-advanced-xml

http://splunkbase.splunk.com/apps/All/4.x/Add-On/app:Splunk+UI+examples+app+for+4.1%2B

View solution in original post

sideview
SplunkTrust
SplunkTrust

If you're using the Advanced XML, it's as simple as putting in a JobProgressIndicator module. Typically you put it as a sibling right above your table's paginator module, or right above your FlashChart module. Or you can put in an entire FlashTimeline module, if the interactivity is a bonus. Or for charting views and views designed to run so-called transforming searches, you can put in an EnablePreview module and you'll get updated results rendered every few seconds while the job is running.

However given that you're asking this question, it's very likely that you're using the Simplified XML instead. Unfortunately the Simplified XML's <form> views have nothing like this.

I recommend converting your view to an advanced XML view, or read the embedded walkthrough copy in the ui_examples app and learn how to write your own advanced XML views.

http://answers.splunk.com/questions/1/how-can-i-convert-simple-view-xml-to-advanced-xml

http://splunkbase.splunk.com/apps/All/4.x/Add-On/app:Splunk+UI+examples+app+for+4.1%2B

Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...