Security

Launch View directly from another website with input fields data set in URL

Krishna_R
Path Finder

Hi,

I have a few views implemented like below in my app.

<form class="formsearch">
  <label>My Dashboard</label>
  <fieldset>     
       <input type="text" token="application" searchWhenChanged="true">
          <label>Application:</label>
          <default>*</default>
       </input>

       <input type="time" searchWhenChanged="true"/>
  </fieldset>

  <row>
    <html><center><h1>My Dashboard</h1></center></html>
  </row>

  <row>

      <chart>
          <title>A simple chart</title>
          <searchTemplate>`filter($application$)` `sample_macro`</searchTemplate>
          <option name="charting.chart">line</option>
          <option name="charting.chart.nullValueMode">connect</option>
     </chart> 
  </row>
</form>

Is it possible to have a URL which directly lands to this view with an $application$ name set (so that I can use a HTTP request, either GET/POST). I'm able to land to the view with the view name, but I couldn't find how to populate the input field values with URL.

Incase this wouldn't work, I'd like ideas on how to implement this feature.

Any help is appreciated.

Thank you, Krishna

Tags (2)

Krishna_R
Path Finder
0 Karma

sideview
SplunkTrust
SplunkTrust

You cannot do this with the default Splunk UI unfortunately. Neither views built with the Simplified XML (like yours) nor views built with the Advanced XML have the ability to prepopulate fields reliably from the arguments in the URL.

It's theoretically possible to hack the system from application.js but you would have to have a pretty sophisticated understanding of Splunk's javascript source code.

However it's not all bad news. I have made an app available on Splunkbase called sideview_utils, and if you write your views in the advanced XML, you have sideview_utils installed on the Splunk instance, and in your app(s) you use certain Sideview modules instead of certain core Splunk modules, then you can prepopulate from the URL very reliably.

The sideview_utils app contains 20-some views that act as it's own documentation and examples. Download it and check it out if you have time.

0 Karma

sideview
SplunkTrust
SplunkTrust

I dont have anything set up yet, but it's coming. I'd say within a month when the new site goes live. In the meantime you can email me with any questions or concerns you have.

0 Karma

Krishna_R
Path Finder

Thanks Nick. I did download the SideView utils app and trying to figure out things.

Is there a forum to discuss about SideView utils, in case of doubts, or is it discussed here?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26   With threats moving at machine speed and attack surfaces expanding across hybrid ...

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

If you hear someone at .conf26 shouting "gear down, GEAR DOWN" across the show floor, you have found us.  The ...

Turn Cisco Telemetry Into Action with Cisco Data Fabric, powered by the Splunk ...

The surge in machine data is already hitting enterprise budgets, and the agentic era will only intensify it. ...