Dashboards & Visualizations

Is a Javascript event called when a SearchManager search returns no data?

jmurdza
Explorer

If search is a SearchManager, the callback search.data("results").on("data", callback) is called when a search returns more than zero events. However I want to know when there are zero events returned.

I see search.on("search:done", callback) and search.on("change", callback) are also callbacks called when a search is finished, but they always called before search.data("results").data() is populated.

How can I consistently know when there is no data returned from a search?

1 Solution

dgladkikh_splun
Splunk Employee
Splunk Employee

search:done event is triggered with two arguments, first is the search manager state object, second is the js sdk job object. First argument can tell you number of events / results.


search.on("search:done", function(state, job) {
if (state.content.resultCount === 0) {
alert("no results");
}
});

View solution in original post

dgladkikh_splun
Splunk Employee
Splunk Employee

search:done event is triggered with two arguments, first is the search manager state object, second is the js sdk job object. First argument can tell you number of events / results.


search.on("search:done", function(state, job) {
if (state.content.resultCount === 0) {
alert("no results");
}
});

tommywang
Explorer

This really helps me a lot. I tried some stupid ways to deal with this situation. Is this written into the documentation? It should be.

0 Karma

jeffland
SplunkTrust
SplunkTrust

This should find its way into the documentation... or is it already in there, but I didn't find it?

0 Karma

kikexclusive
Path Finder

I have the exact same question about the documentation. Do we have to guess these workarounds?

0 Karma

yurykiselev
Path Finder

Splunk web framework documentation is terrible!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Catalog Is Now Generally Available on Splunk Cloud Platform

A Unified View of Your Data  Security logs, application events, business data, and historical telemetry often ...

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner   Watch on demand us for a demo-driven ...