Dashboards & Visualizations

Is it possible to match views in app menu using wildcards, or multiple match strings?

Glenn
Builder

I'm trying to create a menu structure for my app that can be dynamically populated. To do this, I was hoping to use the view source="all" match="blah" syntax.

This of course works when matching a simple substring of the view name, but I would like to take advantage of a naming convention in view names to split the menu in multiple ways.

For example, I have:

igpci_pattern07_WLSaccess_WL10_prod igpci_pattern07_WLSaccess_WL10_demo igpci_pattern07_RSTaccess_prod igpci_pattern07_RSTaccess_demo

I'd like to take advantage of both the WLS/RST (app abbreviation) and the prod/demo parts (environment) to build the menu like this:

<collection label="Log samples - pattern matching - By app">
  <collection label="Restful/Tomcat Prod">
    <view source="all" match="RST*prod"/>
  </collection>
  <collection label="Restful/Tomcat Demo">
    <view source="all" match="RST*demo"/>
  </collection>
  <collection label="Weblogic Prod">
    <view source="all" match="WLS*prod"/>
  </collection>
  <collection label="Weblogic Demo">
    <view source="all" match="WLS*demo"/>
  </collection>
</collection>

This method results in no matches, and another attempt I made just to add another match key/value didnt either (I didnt expect it to).

Is there a way to achieve this short of specifying each view individually? (I have LOADS of them).

Tags (3)
0 Karma
1 Solution

I-Man
Communicator

Thats a negative ghostrider. Simple case insensitive matching with no special characters.

http://answers.splunk.com/questions/12744/navigation-menu-xml-match-help/12745#12745

View solution in original post

I-Man
Communicator

Thats a negative ghostrider. Simple case insensitive matching with no special characters.

http://answers.splunk.com/questions/12744/navigation-menu-xml-match-help/12745#12745

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...