Splunk Dev

looking for proper way to dynamically set 'search' property in PostProcessManager (splunkjs outside of Splunk)

pgoldweic
Communicator

Hi,
I'm looking for the proper way to set the 'search' property of a PostProcessManager in splunkjs within an app that runs outside of Splunk Enterprise. Documentation on this is not clear, and my trials have been unsuccessful, as follows:

 myManager.set("search", <mysearchstring>)    is apparently syntactically correct, but returns no results
 myManager.settings.set("search", <mysearchstring>)   is apparently syntactically correct, but returns no results
 myManager.search.set(<mysearchstring>) is apparently syntactically correct but causes no update in the display
 myManager.query.set(<mysearchstring) is also syntactically correct but causes no update in the display

NOTES:
- After setting the search query, I'm also calling 'startSearch()' on the search manager, and then render() on the chart
- Before responding, please note that this is for apps outside of Splunk and not otherwise. See examples for this type of apps in https://dev.splunk.com/enterprise/docs/developapps/webframework/codeexamplefw/splunkjsstack/searchco... This is where the 'manager.search.set' and 'manager.query.set' are used in examples with plain SearchManager instances)

Thanks in advance for any help.

Labels (1)
0 Karma
1 Solution

pgoldweic
Communicator

I've been able to find the answer to my question after I kept experimenting. Turns out that option #2 above is the correct one. I was originally confused by the fact that the search was returning no results, but eventually I figured out that it was due to a mistake I had made when creating the search query.

View solution in original post

0 Karma

pgoldweic
Communicator

I've been able to find the answer to my question after I kept experimenting. Turns out that option #2 above is the correct one. I was originally confused by the fact that the search was returning no results, but eventually I figured out that it was due to a mistake I had made when creating the search query.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...