I have a simple results table containing hostnames, and when I click a row in the table, I want to popup a window and do a search based on the hostname. First issue, is the window does not popup, it displays in the current window. Secondly, a red error at the top of the search screen states "Search operation 'index' is unknown. You might not have permission to run this operation."
The search query is defined as: index=iam_af host=croshrspax01
The results are displayed correctly, however not sure why there is an error message.
I am using IE6 and Splunk 4.2.1
Here is the code:
<view autoCancelInterval="90" isVisible="true"
onunloadCancelJobs="true" template="dashboard.html"
isSticky="False">
<label>AF Details</label>
<module name="AccountBar" layoutPanel="appHeader" />
<module name="AppBar" layoutPanel="appHeader" />
<module name="SideviewUtils" layoutPanel="appHeader" />
<module name="Message" layoutPanel="messaging">
<param name="filter">*</param>
<param name="maxSize">2</param>
<param name="clearOnJobDispatch">False</param>
</module>
<module name="HTML" layoutPanel="viewHeader">
<param name="html">
<![CDATA[
<h1>AF Details ]]>
</param>
</module>
<module name="HiddenSavedSearch" layoutPanel="panel_row1_col1" autoRun="True">
<param name="savedSearch">AF-Search-CroydonHosts </param>
<module name="HTML" >
<param name="html"><![CDATA[
<h1>DataCenter Croydon</h1>
]]>
</param>
</module>
<module name="JobProgressIndicator"></module>
<module name="Pager">
<param name="entityName">results</param>
<module name="SimpleResultsTable">
<param name="entityName">results</param>
<param name="drilldown">row</param>
<module name="Redirector">
<param name="url">flashtimeline</param>
<param name="arg.q">index=iam_af host=$click.value$</param>
<param name="arg.earliest">rt-5m</param>
<param name="arg.latest">rt</param>
<param name="arg.popup">true</param>
</module>
</module>
<module name="Pager">
<param name="entityName">results</param>
</module>
</module>
</module>
</view>
The first problem is that the flashtimeline view requires that the initial 'search' command be specified before your searchterms. Change your arg.q value to have a prepended 'search'.
And the second problem is simply that you want <param name="popup">
not <param name="arg.popup">
. Because of how Redirector works, the former is it's 'popup' param, determining whether or not the link should load in a popup window. And the latter is simply a directive that the Redirector should put &popup=true
into the URL that the user is sent to.
Note also that the legal values for the 'popup' param are True
and False
and they are case sensitive.
The first problem is that the flashtimeline view requires that the initial 'search' command be specified before your searchterms. Change your arg.q value to have a prepended 'search'.
And the second problem is simply that you want <param name="popup">
not <param name="arg.popup">
. Because of how Redirector works, the former is it's 'popup' param, determining whether or not the link should load in a popup window. And the latter is simply a directive that the Redirector should put &popup=true
into the URL that the user is sent to.
Note also that the legal values for the 'popup' param are True
and False
and they are case sensitive.