Hello,
We are using a search which displays data in a table format on a dashboard. As result, the table is too large. I want to create a search box on the primary column of the table so that a specific entry can be extracted from the results.
Regards,
Ankit
This can be accomplished with SimpleXML..
Change the begining and ends tags to <form>
<label>Search by IP Address</label>
<fieldset autoRun="true" submitButton="true">
<input type="text" token="ip">
<label>Enter IP Address Here</label>
<default>*</default>
<suffix></suffix>
</input>
We defined the token as ip
.. You will then need to pass that token within your query to something like this
<search>
<query>index=access | search $ip$ | stats dc(index) AS numsources values(index) AS sources count AS "JSession Count" values(IPmain) AS "IP Address" values(WebRequest) AS "Web Request" values(RTG_Browser) AS "User Agent String" BY RTG_JSession | where numsources=2 | fields "IP Address" "JSession Count" "User Agent String" "Web Request" | sort 0 -count</query>
<earliest>-15m</earliest>
<latest>now</latest>
</search>