All Apps and Add-ons

Time Ranges for tabs search and main search

rizzo75
Path Finder

I created a dashboard using Sideview Utils.

Here are the modules used and order:
|root view|
|Search|
|Tabs|
|TimeRangePicker|
|Search|
|Table|

Currently, the 1st search runs using the earliest & latest values being set, then the 2nd search runs also using the earliest & latest values set in the 1st search.

I want the 1st search to run to populate the tabs, then stop until the user selects a value in the time range picker, is this possible?

Thanks,
Joe

0 Karma

sideview
SplunkTrust
SplunkTrust

The simplest answer to this sort of question is to slightly modify your design so that there is a Button downstream from the TimeRangePicker and upstream from the Search.

You would give that Button module an allowAutoSubmit param of False. (Whether you also give it an allowSoftSubmit param of False is a separate matter and entirely up to you.)

What this will do, is that the initial autoRun push kicks off that search, the search results populate the Tabs, but then when it hits the indomitable Button with allowAutoSubmit set to False, the push is stopped. The user than has to click the green button in order to proceed.

If you take your question and you replace TimeRangePicker with Pulldown, there is another answer involving the Gate module. Gate is an invisible module that has 2 different "gatelike" use cases. The first is that it can block pushes until one or more keys are set from upstream modules So you can have it block as long as a "select..." item is selected in one or more Pulldowns. Here however, the TimeRangePicker doesn't really have a "select..." state so it always has a key so Gate would have nothing to grab onto.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...