Dashboards & Visualizations

How to display saved search in dashboard panel

jangid
Builder

Hi

I created a splunk app, everything is fine but I can't see my saved search in any menu of app.
How do I provide this functionality in app so user can save their search and same time they can see in panel.

similar to regular splunk search app.

another question is how to load my saved search in flashtimeline?

Thanks

0 Karma
1 Solution

sideview
SplunkTrust
SplunkTrust

As far as seeing saved searches in the app menu, the file that controls what links appear in the app menu is at

$SPLUNK_HOME/etc/apps/<appname>/default/data/ui/nav/default.xml

And my guess is that your app's default.xml file doesn't have a <saved source="unclassified" /> node in it?

You can read more about this here:

http://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/BuildNavigation

View solution in original post

sideview
SplunkTrust
SplunkTrust

As far as seeing saved searches in the app menu, the file that controls what links appear in the app menu is at

$SPLUNK_HOME/etc/apps/<appname>/default/data/ui/nav/default.xml

And my guess is that your app's default.xml file doesn't have a <saved source="unclassified" /> node in it?

You can read more about this here:

http://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/BuildNavigation

jangid
Builder

Yes you are right.
Thanks 🙂

0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...