Splunk Search

Reference Manual for Custom User Interface "Manager XML"

guldendraak
Explorer

When defining a custom modular input in an app, it is possible to design a custom user interface for setting up the parameters of that modular input. Some information on how to do this is available here:
https://docs.splunk.com/Documentation/Splunk/7.2.3/AdvancedDev/ModInputsCustomizeUI

That page shows an example XML definition that contains code that seems to generate GUI elements on the fly. For example this:

<key name="processValueEdit">[[ e for e in ['sourcetype'] if form_defaults.get(e) ][0]]</key>

I was unable to figure out how this works and couldn't find more documentation about it. Any hints where to find more information? Thanks!

thellmann
Splunk Employee
Splunk Employee

This is now documented on dev.splunk.com: https://dev.splunk.com/enterprise/reference/modinputs/modinputsmanagerxml/

(sorry for the thread necromancy but I like to leave notes for others who stumble across the same questions)

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

How much can you really learn in 3 minutes?

Observability can certainly be hard to understand – there's a lot of jargon and buzzwords and it seems to ...

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...