All,
I have a set of HTML here that is running a search inline and I would rather used a scheduled report.
<div id="globe_search" class="splunk-manager" data-require="splunkjs/mvc/searchmanager" data-options='{
"search": "(index=apache* OR index=jbossweb) src_ip=* | iplocation src_ip | table clientip, src_ip, lon, lat",
"preview": true,
"earliest_time": "-1m@m",
"latest_time": "now"
}'>
</div>
However, when I look at an example of using a scheduled report, it really doesn't add up.The language seems very different. How do I go about using the report from below in my panel from above?
new SavedSearchManager({
"id": "search1",
"searchname": "report_iphits",
"cache": "scheduled",
"cancelOnUnload": true,
"status_buckets": 0,
"app": utils.getCurrentApp(),
"auto_cancel": 90,
"preview": true,
"runWhenTimeIsUndefined": false
}, {tokens: true, tokenNamespace: "submitted"});
Thanks in advance,
Give this a try
<div id="globe_search" class="splunk-manager" data-require="splunkjs/mvc/searchmanager" data-options='{
"search": "| savedsearch report_iphits",
"preview": true,
"earliest_time": "-1m@m",
"latest_time": "now"
}'>
</div>