Dashboards & Visualizations

Custom Message for "search is waiting for input" Splunk 7.3.2

gorosco
Engager

I want to replace the message for a custom message in HTML so I can let my users know what they need to do (many of them has problems with english so I want to replace the message for it in their language)

So far I've made a workaround with this:


<panel>
<input type="dropdown" token="run" searchWhenChanged="true">
<label>Run ?</label>
<choice value="null">No</choice>
<choice value="index=myindex">Yes</choice>
<default>null</default>
</input>
<chart depends="$InvResults$">
<search>
<done>
<condition match="$job.resultCount$==0">
<unset token="InvResults"></unset>
</condition>
<condition>
<set token="InvResults">true</set>
</condition>
</done>
<query>$run$ -- searchstring--</query>
<earliest>-15m</earliest>
<latest>now</latest>
</search>
<option name="charting.axisTitleX.visibility">collapsed</option>
<option name="charting.axisTitleY.visibility">collapsed</option>
<option name="charting.chart">line</option>
<option name="refresh.display">progressbar</option>
</chart>
<html rejects="$InvResults$">
<div style="font-weight:bold;text-align:center;font-size:200%;color:#FF3636">Favor selecionar pelo menos 1 dos valores dos tokens acima"</div>
</html>

So as you can see I can manage the "No results found" but while it is "wating for input" I still couldn't find a way around it.

Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...