Dashboards & Visualizations

Passing parameter to saved search in forms (simple xml)

vaibhavagg2006
Communicator

Hi,
I want to pass parameter value from drop down to saved search in simple xml.

I am using @go?s to call savedsearch. Is there any way out to pass parameter value.

Thanks

0 Karma

krithikaVijay
New Member

I am trying to do something similar. Any help on trying to do it via simple XML would be appreciated.

0 Karma

vaibhavagg2006
Communicator

yes you are right. I want to call a saved search on click of a link and pass a parameter(value from dropdown). I guess i have to switch to advanced xml.

0 Karma

nfilippi_splunk
Splunk Employee
Splunk Employee

Correct, form input tokens cannot be passed into saved searches (using "searchName").

The best way to include form input tokens within searches in simple xml is to use either "searchString" or "searchTemplate". In other words, you will need to convert it to an inline search.

sideview
SplunkTrust
SplunkTrust

If you're willing to switch the the advanced XML I'm sure it can be done there and I can help. It sounds like you want your drilldown to send both the name of a savedsearch and also the name of one or more other params, with the savedsearch name being used in the target view to load/run that savedsearch, and also with the additional params being used in searches too. Is that correct?

0 Karma

vaibhavagg2006
Communicator

Couldnt find solution to my problem in this app 😞

0 Karma

Ayn
Legend
0 Karma

vaibhavagg2006
Communicator

No, but i tried to find it in docs but couldnt find it.

0 Karma

Ayn
Legend

Did you download and study the Dashboard examples app?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Thanks for the Memories: .conf26 Took Learning to New Heights

Thank you, Splunk Community, for making .conf26 in Denver one for the books. From packed Splunk University ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...