@danosoclive, you would need <html> textarea input for this to work which is not a default input in Splunk. However if you follow the blog by @jconger, Using HTML5 Input Types on Splunk Forms, you can have html input of your choice in your Splunk Form including Text Area. You would also need a companion Simple XML JS Extension file to capture the changes in the Text Area input and set/unset the required token accordingly.
Following is a run anywhere example to have Multiline Text Area input like Comment in Splunk.
Following is the run anywhere example Simple XML Code:
<dashboard script="html_text_area_input.js">
<label>Multi-line Text Box Area as Splunk Input using Simple XML JS Extension</label>
<init>
<set token="tokComment">Not Applicable.</set>
</init>
<row>
<panel>
<html>
<style>
#html_ta_user_comment{
width: 500px;
height: 115px;
}
</style>
<div>
<label>Enter Comment</label>
</div>
<div>
<textarea id="html_ta_user_comment" name="comment" rows="10" cols="30">Not Applicable.</textarea>
</div>
</html>
<table>
<search>
<query>| makeresults
| fields - _time
| eval "Text Entered"=$tokComment|s$</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="count">20</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">none</option>
<option name="percentagesRow">false</option>
<option name="refresh.display">progressbar</option>
<option name="rowNumbers">false</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
</table>
</panel>
</row>
</dashboard>
Following is the Simple XML JS Extension file html_text_area_input.js to be placed under Splunk app's appserver/static folder (may require debug refresh, bump or splunk restart along with internet browser history cleanup).
require(["jquery",
"splunkjs/mvc",
"splunkjs/mvc/simplexml/ready!"],
function($, mvc) {
var defaultTokenModel = mvc.Components.get("default");
var submitTokenModel = mvc.Components.get("submitted");
$(document).on("change","#html_ta_user_comment",function(){
var strComment=$(this).val();
var strTokComment=defaultTokenModel.get("tokComment");
if(strComment!=="" && strComment!==undefined){
if(strTokComment!==undefined || strTokComment!==strComment){
defaultTokenModel.set("tokComment",strComment);
submitTokenModel.set("tokComment",strComment);
}
}else{
defaultTokenModel.unset("tokComment");
submitTokenModel.unset("tokComment");
}
});
});
