Dashboards & Visualizations

How to add search bar to my created dashboard?

ASR1022
Loves-to-Learn Lots

I have a dashboard created with network data already in that dashboard.  I am trying to create a search dropdown or search bar so I can search for a specific IP and it will show all the data for that IP in my dashboard.

Labels (1)
0 Karma

bowesmana
SplunkTrust
SplunkTrust

If you're using simpleXML dashboards, then simply add a text form input and assign it a token and use that token in your search

<search>
  <query>your search... ip=$ip_text$</query>
</search>
0 Karma

ASR1022
Loves-to-Learn Lots

Thanks, bowesmana,

 

I am new to Splunk I am trying to figure out the query for my search I am using a pivot search and when I put 

ip=$ip_text$

It tells me Error in 'PivotProcessor': Error in 'PivotCell': The dataset 'RootObject' has no field 'IP='.  I am wondering if I am doing the search wrong.

Tags (1)
0 Karma

bowesmana
SplunkTrust
SplunkTrust

Are you using the pivot report and trying to add a filter or creating and classic (XML) or dashboard studio dashboard? 

0 Karma

ASR1022
Loves-to-Learn Lots

Yes I am using the pivot report and trying to add a filter.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...