Dashboards & Visualizations

Can't sort table results from a form search

jambajuice
Communicator

I have a form search that looks like the following:

<row>
    <table>
        <title>JAMBAJUICE</title>
        <searchTemplate>EventCode=644 OR EventCode=4740 Caller_Domain="DOMAIN" NOT (term OR Term) | stats count by user</searchTemplate>
            <option name="showPager">true</option>
                <option name="count">20</option>        
    </table>
</row>

When I get the results back, I don't see the fields available to sort the results. How do I get those to display on the table?

Thanks.

Tags (1)
0 Karma

Genti
Splunk Employee
Splunk Employee

What fields are showing up by default and What fields are you looking for?
Try adding this right underneath your searchTemplate:

<fields>My-first-field, my-second-field, etc</fields>

So your xml should be:

<row>
    <table>
        <title>JAMBAJUICE</title>
        <searchTemplate>EventCode=644 OR EventCode=4740 Caller_Domain="DOMAIN" NOT (term OR Term) | stats count by user</searchTemplate>
        <fields>My-first-field, my-second-field, etc</fields>
            <option name="showPager">true</option>
            <option name="count">20</option>        
    </table>
</row>
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...