Splunk Search

How to store search result to variable in Splunk?

Bhuavana
Explorer

Hi,

Please let me know how to store search result to variable in splunk [like the one in below mentioned code in html] .
// SEARCH MANAGERS
//

    var search1 = new SearchManager({
        "id": "search1",
        "earliest_time": "0",
        "search": "index=wuhost3 revisionlabel=\"*\" | sort -revisionlabel | head 1 | table revisionlabel",
        "latest_time": "now",
        "cancelOnUnload": true,
        "status_buckets": 0,
        "app": utils.getCurrentApp(),
        "auto_cancel": 90,
        "preview": true
    }, {tokens: true, tokenNamespace: "submitted"});

So that i can get the variable output. But my below options are not working :

var userInput = document.getElementById('search1').value;
//var userInput = document.getElementById('search1');

Please help me with correct code to fetch the output to store in a var[html code]

Tags (3)
0 Karma

pasokkum
Path Finder

Try the following:

search1.startSearch();
                      var revisionlabel= search1.data('results');
                      revisionlabel.on("data", function() {   
                          var findrevisionlabel = revisionlabel.data().rows;
                          var output=findrevisionlabel [0][0];
                      });
0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...