Hi,
I have a form where one enters an IP address. This address is used by several searches to fill the dashboard panels. For one panel I need the dns name and not the IP address for the search. Is it possible to do a hidden search first (and do the nslookup) and use this information inside the main search?
I can't do the nslookup inside my main search because the main search starts with a custom command that HAS to be the first command.
Thanks for your help!
Kind regards,
Felix
You could add a Search module and a ResultValueSetter module to have a variable. The only thing to ensure here is the panel which will be using this should be defined within scope of this search and resultvaluesetter. This search will be hidden.
<module name="Search">
<param name="search">
*|head 1| eval hostIp="$YourIPTextBoxName$" | table hostIp | lookup dnslookup clientip as hostIp |rename clienthost as HostName|table HostName
</param>
<module name="ResultsValueSetter">
<param name="fields">HostName</param>
...
...
<module name="Search" layoutPanel="panel_row2_col1">
...Your Search Code Here
</module>
...
...
</module>
</module>