Dashboards & Visualizations

Running different search for a particular ip

CorpusCallosum
Explorer

Hi All

I would like run different search for a particular IP address. For example, a dashboard including a text box. you write your ip and see the results belongs to different searches regarding the ip. How are the main steps to do that?

Listing activity for a particular ip

Any help is appreciated.
Thanks

0 Karma
1 Solution

jtrucks
Splunk Employee
Splunk Employee

Use XML to have an input field that sets a variable, and then each search on the page contains that variable where it needs to be.

For example:

<fieldset>
    <input type="text" token="ipaddress">
        <label>IP</label>
    </input>
</fieldset>

Then your search might be:

<searchString>
|search $ipaddress | chart ....
</searchString>

etc...

--
Jesse Trucks
Minister of Magic

View solution in original post

jtrucks
Splunk Employee
Splunk Employee

Use XML to have an input field that sets a variable, and then each search on the page contains that variable where it needs to be.

For example:

<fieldset>
    <input type="text" token="ipaddress">
        <label>IP</label>
    </input>
</fieldset>

Then your search might be:

<searchString>
|search $ipaddress | chart ....
</searchString>

etc...

--
Jesse Trucks
Minister of Magic

alacercogitatus
SplunkTrust
SplunkTrust

You are going to want to review this page: http://docs.splunk.com/Documentation/Splunk/5.0.3/Viz/Exampleform. Each Situation is different, but essentially, you want to make a simple form with some tables that execute the search based off of the inputted IP address.

Get Updates on the Splunk Community!

New Dates, New City: Save the Date for .conf25!

Wake up, babe! New .conf25 dates AND location just dropped!! That's right, this year, .conf25 is taking place ...

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud  In today’s fast-paced digital ...

Observability protocols to know about

Observability protocols define the specifications or formats for collecting, encoding, transporting, and ...