Splunk Search

populatingSearch vs search?

marco_sulla
Path Finder

What's the difference between

 <populatingSearch fieldForValue="user" fieldForLabel="user">
    <![CDATA[QUERY]]>
</populatingSearch>

and

  <search>
      <query>QUERY</query>
  </search>

and where can I find the documentation about?

0 Karma
1 Solution

MuS
Legend

Hi amrco_sulla,

the difference is that populatingSearch is deprecated and you should use search now. See the docs about this http://docs.splunk.com/Documentation/Splunk/6.2.0/Viz/PanelreferenceforSimplifiedXML#populatingSearc...

cheers, MuS

View solution in original post

MuS
Legend

Hi amrco_sulla,

the difference is that populatingSearch is deprecated and you should use search now. See the docs about this http://docs.splunk.com/Documentation/Splunk/6.2.0/Viz/PanelreferenceforSimplifiedXML#populatingSearc...

cheers, MuS

Get Updates on the Splunk Community!

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Deprecation of Splunk Observability Kubernetes “Classic Navigator” UI starting ...

Access to Splunk Observability Kubernetes “Classic Navigator” UI will no longer be available starting January ...