We have a basic search needed but need to be able to input specific users into a simple dashboard format.
EventCode=4740 user=X
Just looking to show over last 24hours
May be something like this
<form>
<label>Account Lockouts</label>
<fieldset submitButton="false">
<input type="text" token="user" searchWhenChanged="true">
<label>User</label>
<default>*</default>
</input>
</fieldset>
<row>
<panel>
<table>
<search>
<query>EventCode=4740 user=$user$</query>
<earliest>-15m</earliest>
<latest>now</latest>
</search>
<option name="wrap">true</option>
<option name="rowNumbers">false</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">cell</option>
<option name="count">10</option>
</table>
</panel>
</row>
</form>
May be something like this
<form>
<label>Account Lockouts</label>
<fieldset submitButton="false">
<input type="text" token="user" searchWhenChanged="true">
<label>User</label>
<default>*</default>
</input>
</fieldset>
<row>
<panel>
<table>
<search>
<query>EventCode=4740 user=$user$</query>
<earliest>-15m</earliest>
<latest>now</latest>
</search>
<option name="wrap">true</option>
<option name="rowNumbers">false</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">cell</option>
<option name="count">10</option>
</table>
</panel>
</row>
</form>
Thx, that was a good base to start with.