Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About wmw
wmw
Explorer
Member since:
12-01-2022
09-23-2024
Community Statistics
| Posts | 8 |
| Solutions | 1 |
| Karma Given | 0 |
| Karma Received | 1 |
| Member Since | 12-01-2022 |
Activity Feed
- Posted Private app javascript 404 error on Splunk Cloud Platform. 09-20-2024 07:46 AM
- Got Karma for Re: Add HTML markups to alert email. 05-15-2024 12:38 AM
- Posted Re: Using js for button "on click" event on Dashboards & Visualizations. 10-18-2023 07:35 AM
- Posted Re: Using js for button "on click" event on Dashboards & Visualizations. 10-18-2023 06:19 AM
- Posted Re: Using js for button "on click" event on Dashboards & Visualizations. 10-18-2023 06:17 AM
- Posted Using js for button "on click" event on Dashboards & Visualizations. 10-17-2023 02:09 PM
- Posted Re: Hiding search dialog when viewing alert results / OR: escaping tokens in alerts? on Alerting. 03-01-2023 08:50 AM
- Posted Escaping tokens in alert emails on Alerting. 03-01-2023 06:50 AM
- Posted Re: Add HTML markups to alert email on Alerting. 12-01-2022 08:13 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
09-20-2024
07:46 AM
I've successfully uploaded and installed a private app to Cloud. The app simply contains a few javascript-based utilities which are located in, e.g.: common_ui_util/appserver/static/js/close_div.js I'm hoping to use these in the same way that I'm able to from an enterprise install where, from any other app context, I'm able to include the javascript in the simple XML, e.g.: <form version="1.1" script="common_ui_util:/js/close_div.js"> However, this isn't working for me in Cloud, and the console shows the script as 404. The console shows the path as: https://<subdomain>.splunkcloud.com/en-US/static/@<id>/app/common_ui_util//js/close_div.js I've verified that the app is installed and that I have set permissions to read for everyone, and exported globally. Common UI Utilities common_ui_util 1.0.0 No No Global | Permissions Enabled | Disable Uninstall | Edit properties | View objects What am I missing here?
... View more
Labels
- Labels:
-
development
-
troubleshooting
10-18-2023
07:35 AM
I've managed to solve this with an ugly hack based on this post: https://community.splunk.com/t5/All-Apps-and-Add-ons/Why-doesn-t-this-JavaScript-work-to-apply-a-click-event-to-the/m-p/389572 Basically, I've just wrapped the entire javascript snippet with a setTimeout()...
... View more
10-18-2023
06:19 AM
It's purposely never set. The javascript is responsible for displaying the panel instead. However, I do believe that my placement in my example was incorrect and the depends clause should be bound to the panel rather than the row.
... View more
10-18-2023
06:17 AM
I don't see how to edit my post, so I'll make a correction here. The "$HIDEME$" token appears to need to be at the panel level, not the row. <row>
<panel id="help" depends="$HIDEME$"> There is no issue with using that token otherwise, and I have dashboards where this will work until it just stops working. My feeling is that it functions properly early in the dashboard loading process, but then stops once it's complete. My troubleshooting leads me to believe that it might be the case that using <done> conditions to set tokens on search completion is the culprit, e.g. ...
<query>
...
</query>
<earliest>0</earliest>
<latest></latest>
<done>
<condition match="$job.resultCount$ > 0">
<set token="has_notables">true</set>
</condition>
<condition>
<unset token="has_notables"></unset>
</condition>
</done>
</search>
... View more
10-17-2023
02:09 PM
I'm struggling to effectively use a minor amount of javascript which is intended to facilitate some in-dashboard help pages, and hoping that someone might be able to help me out. Given this javascript (in <app>/appserver/static/js/help.js): require([
'jquery',
'splunkjs/mvc/simplexml/ready!'
], function($) {
$('#help-btn').on( 'click', function() {
$('#help').toggle();
});
$('#help-close').on( 'click', function() {
$('#help').toggle();
});
}); And this dashboard which adds a "Dashboard Help" button (next to Edit), the idea would be that simply clicking the button will toggle() the #help id, which is the panel. In "Edit" mode, I can see my overview.html panel as well as the "Dashboard Help" button, and clicking it will perform the correct action. I've used this on live dashboards as well, successfully on some and not so much on others. I imagine there's some sort of timing condition with dynamic loading and whatnot that I'm running into. Can anyone advise? <form version="1.1" script="common_ui_util:/js/help.js">
<label>TEST</label>
<row>
<panel>
<html>
<div>
<input id="help-btn" type="button" value="Dashboard Help" style="top: -40px;" class="btn default"></input>
</div>
</html>
</panel>
</row>
<row depends="$HIDEME$">
<panel id="help">
<html>
<button id="help-close" class="help-close close close_btn"/>
</html>
<html src="html_docs/overview.html"></html>
</panel>
</row>
</form>
... View more
Labels
- Labels:
-
javascript
03-01-2023
08:50 AM
Sorry for the confusion, but I'm referring to the search timeline view when you click on "view results" from an alert, not the actual email content.
... View more
03-01-2023
06:50 AM
I'm using some email alert actions without attachments included. My users aren't technical, so when they click on "view results" in an email the resulting search timeline view within Splunk is overwhelming for them. They're dashboard users, not search users. I'm not aware of a good and simple way to basically just not show the search dialog along with the results on the timeline view (e.g. via some savedsearches.conf "view"/"ui" related config option), though I'd love to hear about one. Instead, I thought to send a custom email in the alert such as: Your Splunk report '$name$' is ready.
Results can be retrieved at the following link:
https://splunk:8000/en-US/app/app/alert_test?search_name=$name$&search_id=$job.sid$ Where the dashboard is basically just this: <row>
<panel>
<title>Search Name: $search_name$</title>
<table>
<search>
<query>| loadjob $search_id$</query>
</search>
<option name="count">100</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">none</option>
<option name="percentagesRow">false</option>
<option name="rowNumbers">true</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
</table>
</panel>
</row> That works, but the problem is that the standard token encoding methods such as $name|u$ don't appear to actually work in alert emails, so spaces and special characters break the link. And, html support for links seems super broken, so I appear to have to send as a text email and allow magic linking to happen, but that doesn't handle the spaces / unencoded name value. I'm hoping for a simple way to deal with this. The only thing I can think of probably involves just dealing with not passing the search name to the dashboard, or getting into cloning the sendemail command to try to make it encode things, and then losing the normal alert configuration UI, etc. This seems like it should be easier to handle all the way around. Why am I forced to push users into a web page that starts with a hideous 40 line search?
... View more
Labels
- Labels:
-
email
12-01-2022
08:13 AM
1 Karma
I appreciate this semi-recent thread on this subject. I'm curious what someone is intended to do in Splunk Cloud though. Like... why does the email alert configuration have 2 buttons at the bottom. 1 says "HTML & Plain Text", the other just says "Plain Text", and regardless of what occurs you just get plain text. Uh, wut?
... View more
