All Apps and Add-ons

Does an ExtendedFieldSearch module in a Search module work?

joy76
Path Finder

Hi everyone~

i'm using URLLOADER. then i send a parameter to a view (VIEW1) by url.

http://splunkhost:8000/app/MyApps/VIEW1?parameter=value

so, i have to use Search module not HiddenSearch module. HiddenSearch module can't receive the parameter from a url by URLLOADER isn't it?

The VIEW1 has a Search module, a StaticSelect module, two ExtendedFieldSearch modules and TimeRangePicker module.

Its structure is like below.

<view>
  <module URLLOADER>
    <module Search>
      <param search>...$parameter$...$parameter1$...$parameter2$...$parameter3$...</param>
        <module StaticSelect >
          <param>parameter1</param>
            <module ExtendedFieldSearch >
              <param>parameter2</param>
                <module ExtendedFieldSearch >
                  <param>parameter2</param>
                    <module TimeRangePicker>
                      ...
                      <module SimpleResultsTable>
    ......
0 Karma

sideview
SplunkTrust
SplunkTrust

If you haven't looked at it already, go to the Sideview Utils documentation and check out

a) the notes about the 'Search' module. The page is called 'The Search module - (aka life without intentions)' and it's one of the most important pages to read.

b) the pages under the section about 'linking'.

Actually even if you have looked at them already, I think you should still go back and take a closer look.

There are a number of things that it says to do on these pages that you're not doing.

1) the Search module has to live downstream from the form element modules whose input contribute to the search. (this is the #1 bullet on the 'Search' page)

2) While you can in some scenarios mix old modules like StaticSelect in with new Sideview modules, it's not recommended, you lose a lot of features (like prepopulation from the URL) and there's really no reason to. Use Pulldown instead of StaticSelect.

and then there are some things that my docs don't explicitly state, but which perhaps they should:

3) ExtendedFieldSearch creates an 'intention' which is a pretty fundamental point of incompatibility with the Sideview modules. Use TextField instead. ExtendedFieldSearch really offers no benefit over TextField.

4) ExtendedFieldSearch, StaticSelect, SearchSelectLister cannot be prepopulated by the URLLoader module. The only core Splunk UI modules that can be prepopulated by URLLoader are SearchBar and TimeRangePicker.

Hope that helps.

joy76
Path Finder

Thanks nick!

I appreciate for your help. always.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...