Extended field search ordering

[sanju005ind]

I would like to display a textbox where users can enter the username and click on submit. The results to be displayed are saved search for the username,last 5 searches,Roles(from a lookupfile) and last login information.

I am not sure the kind of Intentions to use and the ordering of the HiddenSearch and ExtendedFieldSearch modules. I just want the user to click submit once and replace the username field in all the searches to be replaced with the value from the textbox.

[David · Accepted solution]

I think the best place to start would be the UI Examples app:

http://splunkbase.splunk.com/apps/All/4.x/Add-On/app:Splunk+UI+examples+app+for+4.1%2B

That should have plenty of examples of how to work intentions for this type of a situation. Specifically, I'd take a look at form3 (/en-US/app/ui_examples/form3) which is labeled "inverted flow, panel-defined search" in the nav, and "Multi-panel linked form search" on the actual page. That sounds like what you want to do.

Hope that's helpful.