Reporting
×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
Solved! Jump to solution

Saved searches not working via xml in view/dashboard

aportela
New Member
‎07-31-2013 02:40 PM

Have xml code used to generate view / dashboard, am trying to directly call "saved search" to produce output. Have tried to use the searchName and searchString tags, but neither of these work. However, xml code works when i use the actual search command string with the "param name=search" tag.

Are these tags not allowed in HTML panels? If not allowed, is there a command(s) that will permit directly calling "saved searches"? Or, do i need to re-write the view as another type of panel that is not HTML (e.g., table, etc.)?

Any and all help would be much appreciated.
Thanks... Al

Tags (1)
0 Karma
Reply
1 Solution
Solved! Jump to solution
Solution

sowings
Splunk Employee
Splunk Employee
‎07-31-2013 06:07 PM

You've asked if the searchName and searchString tags are valid in HTML panels. So I'm guessing you're doing something like this:


<dashboard>
<row>
<html>
<searchName>
...
</searchName>
</html>
</row>
</dashboard>

You can use searchName as a child of a <table>, <chart>,<event>, <single> or <list>.

See here for more info. I've written dashboards in Simple XML with both searchName referencing a named saved search, as well as searchString with the whole string.

View solution in original post

0 Karma
Reply
Solved! Jump to solution
Solution

sowings
Splunk Employee
Splunk Employee
‎07-31-2013 06:07 PM

You've asked if the searchName and searchString tags are valid in HTML panels. So I'm guessing you're doing something like this:


<dashboard>
<row>
<html>
<searchName>
...
</searchName>
</html>
</row>
</dashboard>

You can use searchName as a child of a <table>, <chart>,<event>, <single> or <list>.

See here for more info. I've written dashboards in Simple XML with both searchName referencing a named saved search, as well as searchString with the whole string.

0 Karma
Reply
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Take the Survey
Register for .conf25!
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...