Dashboards & Visualizations

How to display saved search in dashboard panel

jangid
Builder

Hi

I created a splunk app, everything is fine but I can't see my saved search in any menu of app.
How do I provide this functionality in app so user can save their search and same time they can see in panel.

similar to regular splunk search app.

another question is how to load my saved search in flashtimeline?

Thanks

0 Karma
1 Solution

sideview
SplunkTrust
SplunkTrust

As far as seeing saved searches in the app menu, the file that controls what links appear in the app menu is at

$SPLUNK_HOME/etc/apps/<appname>/default/data/ui/nav/default.xml

And my guess is that your app's default.xml file doesn't have a <saved source="unclassified" /> node in it?

You can read more about this here:

http://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/BuildNavigation

View solution in original post

sideview
SplunkTrust
SplunkTrust

As far as seeing saved searches in the app menu, the file that controls what links appear in the app menu is at

$SPLUNK_HOME/etc/apps/<appname>/default/data/ui/nav/default.xml

And my guess is that your app's default.xml file doesn't have a <saved source="unclassified" /> node in it?

You can read more about this here:

http://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/BuildNavigation

jangid
Builder

Yes you are right.
Thanks 🙂

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) v3.54.0

The Splunk Threat Research Team (STRT) recently released Enterprise Security Content Update (ESCU) v3.54.0 and ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

New Learning Videos on Topics Most Requested by You! Plus This Month’s New Splunk ...

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...