When attempting to make a Simple Form Search using the Developer Manual documentation, I encounter the error:
NotImplementedError: Cannot find object mapper for panel type: form
I'm confused as to what I may be missing here? Here is the XML that I'm building my view with. I'm running 4.0.8
<?xml version='1.0' encoding='utf-8'?>
<dashboard>
<label>Form search test</label>
<row>
<form>
<label>My form search</label>
<searchTemplate>$ipaddress$</searchTemplate>
<fieldset>
<input type="text" token="ipaddress" />
</fieldset>
</form>
</row>
</dashboard>
The top level tag should be <form>
, like:
<form>
<label>Form search test</label>
<searchTemplate>$ipaddress$</searchTemplate>
<fieldset>
<input type="text" token="ipaddress" />
</fieldset>
</form>
Now, you'll want something to show the results of your search so you need to add some kind of output. For example, if you want to see the raw events:
<form>
<label>Form search test</label>
<searchTemplate>$ipaddress$</searchTemplate>
<fieldset>
<input type="text" token="ipaddress" />
</fieldset>
<row>
<event />
</row>
</form>
For a full description of available tags in form searches, see: http://www.splunk.com/base/Documentation/4.1/Developer/FormIntro
The top level tag should be <form>
, like:
<form>
<label>Form search test</label>
<searchTemplate>$ipaddress$</searchTemplate>
<fieldset>
<input type="text" token="ipaddress" />
</fieldset>
</form>
Now, you'll want something to show the results of your search so you need to add some kind of output. For example, if you want to see the raw events:
<form>
<label>Form search test</label>
<searchTemplate>$ipaddress$</searchTemplate>
<fieldset>
<input type="text" token="ipaddress" />
</fieldset>
<row>
<event />
</row>
</form>
For a full description of available tags in form searches, see: http://www.splunk.com/base/Documentation/4.1/Developer/FormIntro