i have a nice long saved search:
savedsearch A
index="disk" fs="/path/of/filesystem"|stats ..........
i want 400 or so of the same search, but with a different fs= (and different savedsearch name obviously), but cloning and modifying 400+ times seems wasteful
is there a way to do this using copy/pasta in savedsearches.conf/viewstates.conf?
would i need to manually create vsid values?
Why not create a form search with a drop down that populates all of the FS values? then it's just a matter of choosing whatever FS you want to report on.
Why not create a form search with a drop down that populates all of the FS values? then it's just a matter of choosing whatever FS you want to report on.
No problem 😉 I believe there is an example of setting up that form search in the Advanced UI examples app.
thanks for reminding me to rtfm 🙂