Hi
We have just started using splunk with real data in my organisation, and to a start we're only using it to show and compare events from different types of logs
I'm looking for a way to have some form boxes in a dashboard, so my users just can input a value, and then this value is added to a already defined searchstring in the normal search window
Like i have a predefined search like sourcetype="platform_jboss_log" index="index1" "string"
So when inputting a value it would switch to a search window with the value defined and search is started
I have browsed around here, and in the 6.x dashboard examples not finding anything really useful. - Is this so much out of splunk usecase?
I just wan't to give my users a easy way to search for the stuff they need without they need to prefix their searches manually with sourcetype etc.
Thanks
Mads
... View more