Reporting

Is there a way, using Advanced XML, to display the title of a saved search passed into a custom view?

dlovett
Path Finder

I have a collection in my default navigation xml for reports. The collection includes all saved searches that match a specific tag and specifies a custom view for displaying results. I can get the title of the saved search to display if I use the "SearchBar" module; however, we do not want to allow general end users to be able to submit searches.

Is there a way, using Advanced XML, to display the title of a saved search passed into a custom view?

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

You can access the saved search's name with $search.name$, and then display it in an HTML module for example (requires sideview utils, not sure if v1 suffices).

Get Updates on the Splunk Community!

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...