Splunk Search

Can customized SearchBar be readonly?

royimad
Builder

Hello Splunk Experts,

I have a SearchBar that inherit it's value from a Search

$calculation$

I would like that the SearchBar to be readonly , how to do that?

Thanks,

1 Solution

sideview
SplunkTrust
SplunkTrust

I would use an HTML module, create a <textarea>, mark it readonly and dump $search$ into it.

At it's simplest:

<module name="HTML">
  <param name="html"><![CDATA[
    <textarea readonly>$search$</textarea>
  ]]></param>
</module>

View solution in original post

sideview
SplunkTrust
SplunkTrust

I would use an HTML module, create a <textarea>, mark it readonly and dump $search$ into it.

At it's simplest:

<module name="HTML">
  <param name="html"><![CDATA[
    <textarea readonly>$search$</textarea>
  ]]></param>
</module>

alacercogitatus
SplunkTrust
SplunkTrust

If you don't want the search to change, I wouldn't display the bar. According to Module Ref, there is no readonly option.

http://docs.splunk.com/Documentation/Splunk/5.0.2/AdvancedDev/ModuleReference#SearchBar

Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...