Splunk Search

search for a string containing any substring that is typed in the text input

anooshac
Communicator

Hi all,

I have a text input for a table header. My requirement is , by default the table should show all the values and if any letters typed in the text box, the same should match with the table header and the values containing that sub string should be displayed. I created the text box but haven't figured out how to match this sub string to the header. Please help me in this..

Labels (1)
Tags (3)
0 Karma

aasabatini
Motivator

Hi @anooshac 

 

can you share your dashboard or your search?

 

with this info we can help you better

 

“The answer is out there, Neo, and it’s looking for you, and it will find you if you want it to.”
0 Karma

anooshac
Communicator

This input is to type the sub string.Default value should be all data. The search string can contain 1 or more letters, it should match the task _name in the query below and produce the table for the same.

<input type="text" token="Tok_task">
<label>Task Name</label>
</input>

The query used for table is(since i cannot write the actual query here I have used examples),

index= "abc" sourcetype="xyz"| rex field=URL "(?&lt;http&gt;[^/]*)://(?&lt;group_name&gt;[^/]*)/(?&lt;project_name&gt;[^/]*)/(?&lt;task_name&gt;[^/]*)"| table task_name URL project_name group_name

I tried to add the token from input directly in the query, but it is not working. Can you please help with this one?

 

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...