Security

Launch View directly from another website with input fields data set in URL

Krishna_R
Path Finder

Hi,

I have a few views implemented like below in my app.

<form class="formsearch">
  <label>My Dashboard</label>
  <fieldset>     
       <input type="text" token="application" searchWhenChanged="true">
          <label>Application:</label>
          <default>*</default>
       </input>

       <input type="time" searchWhenChanged="true"/>
  </fieldset>

  <row>
    <html><center><h1>My Dashboard</h1></center></html>
  </row>

  <row>

      <chart>
          <title>A simple chart</title>
          <searchTemplate>`filter($application$)` `sample_macro`</searchTemplate>
          <option name="charting.chart">line</option>
          <option name="charting.chart.nullValueMode">connect</option>
     </chart> 
  </row>
</form>

Is it possible to have a URL which directly lands to this view with an $application$ name set (so that I can use a HTTP request, either GET/POST). I'm able to land to the view with the view name, but I couldn't find how to populate the input field values with URL.

Incase this wouldn't work, I'd like ideas on how to implement this feature.

Any help is appreciated.

Thank you, Krishna

Tags (2)

Krishna_R
Path Finder
0 Karma

sideview
SplunkTrust
SplunkTrust

You cannot do this with the default Splunk UI unfortunately. Neither views built with the Simplified XML (like yours) nor views built with the Advanced XML have the ability to prepopulate fields reliably from the arguments in the URL.

It's theoretically possible to hack the system from application.js but you would have to have a pretty sophisticated understanding of Splunk's javascript source code.

However it's not all bad news. I have made an app available on Splunkbase called sideview_utils, and if you write your views in the advanced XML, you have sideview_utils installed on the Splunk instance, and in your app(s) you use certain Sideview modules instead of certain core Splunk modules, then you can prepopulate from the URL very reliably.

The sideview_utils app contains 20-some views that act as it's own documentation and examples. Download it and check it out if you have time.

0 Karma

sideview
SplunkTrust
SplunkTrust

I dont have anything set up yet, but it's coming. I'd say within a month when the new site goes live. In the meantime you can email me with any questions or concerns you have.

0 Karma

Krishna_R
Path Finder

Thanks Nick. I did download the SideView utils app and trying to figure out things.

Is there a forum to discuss about SideView utils, in case of doubts, or is it discussed here?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...