All Apps and Add-ons

How do i get parameter by URLLoader and HiddenSearch?

ilove275
Path Finder

-----------------Send eventName modules---------------

true
search_test2
$click.fields.EventName$

Below is a link from a view .

http://localhost:8000/app/testApp/testView?***event***="eventName"

How do i get parameter by URLLoader and HiddenSearch ?





index=tms_header EventName="event" OrgName="$OrgName$" AttackerIP=$AttackerIP$ VictimIP=$VictimIP$
|table Time ID OrgName SensorIP EventName ATTACK_NAME AttackerIP AttackerPort VictimIP VictimPort Count

OrgName_setting



ALL


ORG_1
ORG_1


ORG_2
ORG_2


False

ORGName:

OrgName_setting

stringreplace



True
$target$




AttackerIP :


stringreplace


True












VictimIP :
*

stringreplace


True











False

True
Search


100
results

True
False

100
row
True


flashtimeline




flashtimeline












0 Karma

ilove275
Path Finder

thanks for your help

0 Karma

sideview
SplunkTrust
SplunkTrust

Well it would be strange to use URLLoader with HiddenSearch. I think what you mean is using URLLoader with the Search module.

There are a couple problems with this configuration, and I think you should check out the Sideview Utils documentation a bit more. You're using ViewRedirector here instead of Redirector, and using HiddenSearch instead of Search.

But in a nutshell URLLoader takes the arguments from the URL and makes them available to all the modules downstream (ie nested inside URLLoader). So for example you would put a Search module downstream from the URLLaoder, and then you put $event$ somewhere in its 'search' param.

But the documentation goes into more detail than this and provides several examples.

Get Updates on the Splunk Community!

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...