Splunk Search

run the second search query only after the first search query completes

harshal_chakran
Builder

Hi,
I have a dashboard in advance xml, where I am using a search query to run a python script :-

<view template="dashboard.html"><label></label>  <module name="AccountBar" layoutPanel="appHeader"/>  <module name="AppBar" layoutPanel="navigationHeader"/>  <module name="Message" layoutPanel="messaging">
<param name="filter">*</param>

<param name="clearOnJobDispatch">False</param>

<param name="maxSize">1</param>

<param name="mode">independent</param>

<param name="label"> Splunk Label</param>


<!-- THE SECOND SWITCHER CHILD -->

<module name="HiddenSearch" group=" " autoRun="True">

 <param name="search">| script python myScript</param>

  <param name="earliest">-1h</param>

  <module name="HiddenChartFormatter">


    <module name="JobProgressIndicator"/>

    <module name="FlashChart">

      <param name="width">100%</param>

      <param name="height">300px</param>

    </module>

  </module>

</module>   </module></view>

This search script takes some time to load. And I want another search query to be run, only after this script completes. Is there any way to do this.
Please Help...!!!

0 Karma

MuS
Legend

Hi harshal_chakranarayan,

if you take your script and create a custom search command, then you could try to run this custom search command as HiddenSearch and postprocess the HiddenSearch results.

hope this helps ...

cheers, MuS

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...