Splunk Search

Reference Manual for Custom User Interface "Manager XML"

guldendraak
Explorer

When defining a custom modular input in an app, it is possible to design a custom user interface for setting up the parameters of that modular input. Some information on how to do this is available here:
https://docs.splunk.com/Documentation/Splunk/7.2.3/AdvancedDev/ModInputsCustomizeUI

That page shows an example XML definition that contains code that seems to generate GUI elements on the fly. For example this:

<key name="processValueEdit">[[ e for e in ['sourcetype'] if form_defaults.get(e) ][0]]</key>

I was unable to figure out how this works and couldn't find more documentation about it. Any hints where to find more information? Thanks!

thellmann
Splunk Employee
Splunk Employee

This is now documented on dev.splunk.com: https://dev.splunk.com/enterprise/reference/modinputs/modinputsmanagerxml/

(sorry for the thread necromancy but I like to leave notes for others who stumble across the same questions)

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...