Splunk Search
Highlighted

run the second search query only after the first search query completes

Hi,
I have a dashboard in advance xml, where I am using a search query to run a python script :-

<view template="dashboard.html"><label></label>  <module name="AccountBar" layoutPanel="appHeader"/>  <module name="AppBar" layoutPanel="navigationHeader"/>  <module name="Message" layoutPanel="messaging">
<param name="filter">*</param>

<param name="clearOnJobDispatch">False</param>

<param name="maxSize">1</param>

<param name="mode">independent</param>

<param name="label"> Splunk Label</param>


<!-- THE SECOND SWITCHER CHILD -->

<module name="HiddenSearch" group=" " autoRun="True">

 <param name="search">| script python myScript</param>

  <param name="earliest">-1h</param>

  <module name="HiddenChartFormatter">


    <module name="JobProgressIndicator"/>

    <module name="FlashChart">

      <param name="width">100%</param>

      <param name="height">300px</param>

    </module>

  </module>

</module>   </module></view>

This search script takes some time to load. And I want another search query to be run, only after this script completes. Is there any way to do this.
Please Help...!!!

0 Karma
Highlighted

Re: run the second search query only after the first search query completes

SplunkTrust
SplunkTrust

Hi harshal_chakranarayan,

if you take your script and create a custom search command, then you could try to run this custom search command as HiddenSearch and postprocess the HiddenSearch results.

hope this helps ...

cheers, MuS

0 Karma