Splunk Search

Add hidden search string to flashtimeline view

christian_l
Path Finder

Hi there,

I'd like to modify the default search form of Splunk (flashtimeline view) for a new app.
Therefore I'd like to add some search-strings to the search-field. These search-strings shouldn't be seen by the user. I think this would be a task for HiddenIntention module but read this module is deprecated, so I don't want to use it for a new app.
How can the task be done without the HiddenIntention module?

Regards,
Christian

0 Karma

sowings
Splunk Employee
Splunk Employee

In the near term, you could certainly continue to use an intention; I've done this for precisely the reasons you describe. I placed an addterm intention in a local/ copy of the flashtimeline view for my app. Below is the module block I used:


<module name="ConvertToIntention">
<param name="intention">
<param name="name">addterm</param>
<param name="arg">
<param name="index">test-*</param>
</param>
</param>

I placed this as a child of my <SubmitButton>, and closed the tags appropriately.

0 Karma
Get Updates on the Splunk Community!

Observability | How to Think About Instrumentation Overhead (White Paper)

Novice observability practitioners are often overly obsessed with performance. They might approach ...

Cloud Platform | Get Resiliency in the Cloud Event (Register Now!)

IDC Report: Enterprises Gain Higher Efficiency and Resiliency With Migration to Cloud  Today many enterprises ...

The Great Resilience Quest: 10th Leaderboard Update

The tenth leaderboard update (11.23-12.05) for The Great Resilience Quest is out &gt;&gt; As our brave ...