Dashboards & Visualizations

Displaying loading notification on Splunk form searches

pj
Contributor

When i go to a form created in Splunk, enter the criteria required and hit search, there is no notification to inform the user that the search button has been pressed and the search is underway. Instead, the user just sits there thinking 'is splunk doing anything?!'.

Is there anyway to implement some kind of loading message/animation when a user hits search from a form?

Thanks!

1 Solution

sideview
SplunkTrust
SplunkTrust

If you're using the Advanced XML, it's as simple as putting in a JobProgressIndicator module. Typically you put it as a sibling right above your table's paginator module, or right above your FlashChart module. Or you can put in an entire FlashTimeline module, if the interactivity is a bonus. Or for charting views and views designed to run so-called transforming searches, you can put in an EnablePreview module and you'll get updated results rendered every few seconds while the job is running.

However given that you're asking this question, it's very likely that you're using the Simplified XML instead. Unfortunately the Simplified XML's <form> views have nothing like this.

I recommend converting your view to an advanced XML view, or read the embedded walkthrough copy in the ui_examples app and learn how to write your own advanced XML views.

http://answers.splunk.com/questions/1/how-can-i-convert-simple-view-xml-to-advanced-xml

http://splunkbase.splunk.com/apps/All/4.x/Add-On/app:Splunk+UI+examples+app+for+4.1%2B

View solution in original post

sideview
SplunkTrust
SplunkTrust

If you're using the Advanced XML, it's as simple as putting in a JobProgressIndicator module. Typically you put it as a sibling right above your table's paginator module, or right above your FlashChart module. Or you can put in an entire FlashTimeline module, if the interactivity is a bonus. Or for charting views and views designed to run so-called transforming searches, you can put in an EnablePreview module and you'll get updated results rendered every few seconds while the job is running.

However given that you're asking this question, it's very likely that you're using the Simplified XML instead. Unfortunately the Simplified XML's <form> views have nothing like this.

I recommend converting your view to an advanced XML view, or read the embedded walkthrough copy in the ui_examples app and learn how to write your own advanced XML views.

http://answers.splunk.com/questions/1/how-can-i-convert-simple-view-xml-to-advanced-xml

http://splunkbase.splunk.com/apps/All/4.x/Add-On/app:Splunk+UI+examples+app+for+4.1%2B

Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...