Here is the situation:
I've got a dashboard where the user can type in an IP address. I've got a global base search that runs through all the logs and returns a table of source IPs, destination IPs, and destination ports. The twist here is that this table includes any translations that show up in some portions of the infrastructure. Now I take this table and run it through another post process search of a drop-down to generate the search string that includes all translations (so I am getting events that would not be found using the input IP) and assign it to the drop-down's token. The search string is automatically chosen using the <selectFirstChoice>true</selectFirstChoice> property of the drop-down. This works occasionally, but what seems to be happening is it will populate correctly then the search will progress a little more and the value of the drop-down element will change, the choice selected by <selectFirstChoice> is now incorrect and I have to re-select it. So my question is: Is it possible to have a search blocked until completely finished in Simple XML, so that post-processing doesn't happen until the result set is fully defined?
A couple of points:
- I'm using this in an environment where I don't have access to add apps or use custom javascript in a dashboard.
- I'm going to post-process the table returned in the global search a couple of different ways, so need to keep it there. Otherwise I would just merge this all into a subsearch.
Thanks in advance for any replies!
... View more