Dashboards & Visualizations

how to pass savedsearch name as a token in django

mvaradarajam
Path Finder

Hi All,

i want to pass savedsearch value as a token in django.
i tried this one,but it is not working.
{% savedsearchmanager
id="search_chart"
searchname="$sourcetype$"
app="RealtimeServiceComponentMonitoring"
earliest_time="$headcount$"
latest_time="now"
cache=False

here sourcetype as radiogroup name.

can u plz help me.

Tags (2)
0 Karma

dfoster_splunk
Splunk Employee
Splunk Employee

Add a token_safe filter to attributes that you want to be replaced with tokens. For example:

{% savedsearchmanager
        id="search_chart"
        searchname="$sourcetype$"|token_safe 
        app="RealtimeServiceComponentMonitoring"
        earliest_time="$headcount$"|token_safe
        latest_time="now"
        cache=False %}
0 Karma

dfoster_splunk
Splunk Employee
Splunk Employee

I don't have enough information.

Is it the case that you have a saved search in Splunk in the "RealtimeServiceComponentMonitoring" app called and that you have set the $sourcetype$ token to "" by some means (like a text field)? Under those circumstances the SavedSearchManager should find saved search and run it.

Perhaps you could attach the entire page so I could read it?

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...