Splunk Search

How to store search result to variable in Splunk?

Bhuavana
Explorer

Hi,

Please let me know how to store search result to variable in splunk [like the one in below mentioned code in html] .
// SEARCH MANAGERS
//

    var search1 = new SearchManager({
        "id": "search1",
        "earliest_time": "0",
        "search": "index=wuhost3 revisionlabel=\"*\" | sort -revisionlabel | head 1 | table revisionlabel",
        "latest_time": "now",
        "cancelOnUnload": true,
        "status_buckets": 0,
        "app": utils.getCurrentApp(),
        "auto_cancel": 90,
        "preview": true
    }, {tokens: true, tokenNamespace: "submitted"});

So that i can get the variable output. But my below options are not working :

var userInput = document.getElementById('search1').value;
//var userInput = document.getElementById('search1');

Please help me with correct code to fetch the output to store in a var[html code]

Tags (3)
0 Karma

pasokkum
Path Finder

Try the following:

search1.startSearch();
                      var revisionlabel= search1.data('results');
                      revisionlabel.on("data", function() {   
                          var findrevisionlabel = revisionlabel.data().rows;
                          var output=findrevisionlabel [0][0];
                      });
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...