Dashboards & Visualizations

Running different search for a particular ip

CorpusCallosum
Explorer

Hi All

I would like run different search for a particular IP address. For example, a dashboard including a text box. you write your ip and see the results belongs to different searches regarding the ip. How are the main steps to do that?

Listing activity for a particular ip

Any help is appreciated.
Thanks

0 Karma
1 Solution

jtrucks
Splunk Employee
Splunk Employee

Use XML to have an input field that sets a variable, and then each search on the page contains that variable where it needs to be.

For example:

<fieldset>
    <input type="text" token="ipaddress">
        <label>IP</label>
    </input>
</fieldset>

Then your search might be:

<searchString>
|search $ipaddress | chart ....
</searchString>

etc...

--
Jesse Trucks
Minister of Magic

View solution in original post

jtrucks
Splunk Employee
Splunk Employee

Use XML to have an input field that sets a variable, and then each search on the page contains that variable where it needs to be.

For example:

<fieldset>
    <input type="text" token="ipaddress">
        <label>IP</label>
    </input>
</fieldset>

Then your search might be:

<searchString>
|search $ipaddress | chart ....
</searchString>

etc...

--
Jesse Trucks
Minister of Magic

alacercogitatus
SplunkTrust
SplunkTrust

You are going to want to review this page: http://docs.splunk.com/Documentation/Splunk/5.0.3/Viz/Exampleform. Each Situation is different, but essentially, you want to make a simple form with some tables that execute the search based off of the inputted IP address.

Get Updates on the Splunk Community!

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Announcing the General Availability of Splunk Enterprise Security 8.1!

We are pleased to announce the general availability of Splunk Enterprise Security 8.1. Splunk becomes the only ...

Developer Spotlight with William Searle

The Splunk Guy: A Developer’s Path from Web to Cloud William is a Splunk Professional Services Consultant with ...