All Apps and Add-ons

Time Ranges for tabs search and main search

rizzo75
Path Finder

I created a dashboard using Sideview Utils.

Here are the modules used and order:
|root view|
|Search|
|Tabs|
|TimeRangePicker|
|Search|
|Table|

Currently, the 1st search runs using the earliest & latest values being set, then the 2nd search runs also using the earliest & latest values set in the 1st search.

I want the 1st search to run to populate the tabs, then stop until the user selects a value in the time range picker, is this possible?

Thanks,
Joe

0 Karma

sideview
SplunkTrust
SplunkTrust

The simplest answer to this sort of question is to slightly modify your design so that there is a Button downstream from the TimeRangePicker and upstream from the Search.

You would give that Button module an allowAutoSubmit param of False. (Whether you also give it an allowSoftSubmit param of False is a separate matter and entirely up to you.)

What this will do, is that the initial autoRun push kicks off that search, the search results populate the Tabs, but then when it hits the indomitable Button with allowAutoSubmit set to False, the push is stopped. The user than has to click the green button in order to proceed.

If you take your question and you replace TimeRangePicker with Pulldown, there is another answer involving the Gate module. Gate is an invisible module that has 2 different "gatelike" use cases. The first is that it can block pushes until one or more keys are set from upstream modules So you can have it block as long as a "select..." item is selected in one or more Pulldowns. Here however, the TimeRangePicker doesn't really have a "select..." state so it always has a key so Gate would have nothing to grab onto.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...