Search feed by hiddensearch

[fbl_itcs]

Hi,

I have a form where one enters an IP address. This address is used by several searches to fill the dashboard panels. For one panel I need the dns name and not the IP address for the search. Is it possible to do a hidden search first (and do the nslookup) and use this information inside the main search?

I can't do the nslookup inside my main search because the main search starts with a custom command that HAS to be the first command.

Thanks for your help!

Kind regards,
Felix

[somesoni2]

You could add a Search module and a ResultValueSetter module to have a variable. The only thing to ensure here is the panel which will be using this should be defined within scope of this search and resultvaluesetter. This search will be hidden.

<module name="Search">
    <param name="search">
*|head 1| eval hostIp="$YourIPTextBoxName$" | table hostIp  | lookup dnslookup clientip as hostIp |rename clienthost as HostName|table HostName
    </param>                
    <module name="ResultsValueSetter">
        <param name="fields">HostName</param>
        ...
        ...
        <module name="Search" layoutPanel="panel_row2_col1">
        ...Your Search Code Here
        </module>
        ...
        ...
    </module>
</module>