Splunk Search

Can customized SearchBar be readonly?

royimad
Builder

Hello Splunk Experts,

I have a SearchBar that inherit it's value from a Search

$calculation$

I would like that the SearchBar to be readonly , how to do that?

Thanks,

1 Solution

sideview
SplunkTrust
SplunkTrust

I would use an HTML module, create a <textarea>, mark it readonly and dump $search$ into it.

At it's simplest:

<module name="HTML">
  <param name="html"><![CDATA[
    <textarea readonly>$search$</textarea>
  ]]></param>
</module>

View solution in original post

sideview
SplunkTrust
SplunkTrust

I would use an HTML module, create a <textarea>, mark it readonly and dump $search$ into it.

At it's simplest:

<module name="HTML">
  <param name="html"><![CDATA[
    <textarea readonly>$search$</textarea>
  ]]></param>
</module>

alacercogitatus
SplunkTrust
SplunkTrust

If you don't want the search to change, I wouldn't display the bar. According to Module Ref, there is no readonly option.

http://docs.splunk.com/Documentation/Splunk/5.0.2/AdvancedDev/ModuleReference#SearchBar

Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...