Dashboards & Visualizations

how to pass savedsearch name as a token in django

mvaradarajam
Path Finder

Hi All,

i want to pass savedsearch value as a token in django.
i tried this one,but it is not working.
{% savedsearchmanager
id="search_chart"
searchname="$sourcetype$"
app="RealtimeServiceComponentMonitoring"
earliest_time="$headcount$"
latest_time="now"
cache=False

here sourcetype as radiogroup name.

can u plz help me.

Tags (2)
0 Karma

dfoster_splunk
Splunk Employee
Splunk Employee

Add a token_safe filter to attributes that you want to be replaced with tokens. For example:

{% savedsearchmanager
        id="search_chart"
        searchname="$sourcetype$"|token_safe 
        app="RealtimeServiceComponentMonitoring"
        earliest_time="$headcount$"|token_safe
        latest_time="now"
        cache=False %}
0 Karma

dfoster_splunk
Splunk Employee
Splunk Employee

I don't have enough information.

Is it the case that you have a saved search in Splunk in the "RealtimeServiceComponentMonitoring" app called and that you have set the $sourcetype$ token to "" by some means (like a text field)? Under those circumstances the SavedSearchManager should find saved search and run it.

Perhaps you could attach the entire page so I could read it?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...