All Apps and Add-ons

Sideview Utils Newb: using Table and Redirector in 6.0

andrewkenth
Communicator

I am attempting to create a simple tool to view and then edit a row using sideview utils and inputlookup. However, the following simply returns a blank page. Do I need to be in the sideview app (that does not seem to work..) or can I be in any app? Does sideview not work with 6.0?

<view>
  <label>Ignore_AdLogon_Other</label>

   <!-- top nav chrome -->
  <module name="AccountBar" layoutPanel="appHeader"/>
  <module name="AppBar" layoutPanel="navigationHeader"/>


  <module name="HiddenSearch" layoutPanel="panel_row1_col1" group="Lookup Contents" autoRun="true">
    <param name="search"> | inputlookup Ignore_AdLogon_Other.csv | table ADLogon Reason</param>         
    <module name="Table">
        <module name="Redirector">
        <param name="url">Ignore_AdLogon_Other</param>
        <param name="arg.ADLogon">$row.fields.ADLogon$</param>
        <param name="arg.Reason">$row.fields.Reason$</param>
        </module>
    </module> 
 </module>
  </view>
1 Solution

andrewkenth
Communicator

Using the examples provided I was able to trim down the example and replace key code w/ my own requirements. One key piece is to have

<view autoCancelInterval="90" isSticky="False" onunloadCancelJobs="true" template="dashboard.html">
<label>Exception Managment</label>
  <module name="AccountBar" layoutPanel="appHeader" />
  <module name="AppBar" layoutPanel="appHeader" />
  <module name="SideviewUtils" layoutPanel="appHeader" />
  <module name="HTML" layoutPanel="viewHeader">
    <param name="html"><![CDATA[
    <h1>Exception Managment</h1>
    ]]></param>
  </module>
  <module name="HiddenSearch" layoutPanel="panel_row1_col1" autoRun="True" group="Ignore AdLogon (Other)">
    <param name="search">| inputlookup Ignore_AdLogon_Other.csv | table ADLogon Reason</param>   
      <module name="Table" >   
        <module name="Redirector">
           <param name="url">Ignore_AdLogon_Other_edit</param>
           <param name="arg.ADLogon">$row.fields.ADLogon$</param>
           <param name="arg.Reason">$row.fields.Reason$</param>          
        </module>
       </module>
</module> 
</view>

View solution in original post

andrewkenth
Communicator

Using the examples provided I was able to trim down the example and replace key code w/ my own requirements. One key piece is to have

<view autoCancelInterval="90" isSticky="False" onunloadCancelJobs="true" template="dashboard.html">
<label>Exception Managment</label>
  <module name="AccountBar" layoutPanel="appHeader" />
  <module name="AppBar" layoutPanel="appHeader" />
  <module name="SideviewUtils" layoutPanel="appHeader" />
  <module name="HTML" layoutPanel="viewHeader">
    <param name="html"><![CDATA[
    <h1>Exception Managment</h1>
    ]]></param>
  </module>
  <module name="HiddenSearch" layoutPanel="panel_row1_col1" autoRun="True" group="Ignore AdLogon (Other)">
    <param name="search">| inputlookup Ignore_AdLogon_Other.csv | table ADLogon Reason</param>   
      <module name="Table" >   
        <module name="Redirector">
           <param name="url">Ignore_AdLogon_Other_edit</param>
           <param name="arg.ADLogon">$row.fields.ADLogon$</param>
           <param name="arg.Reason">$row.fields.Reason$</param>          
        </module>
       </module>
</module> 
</view>

sideview
SplunkTrust
SplunkTrust

Yep, the problem was you didn't have the SideviewUtils module on the page.

Back on the Sideview Utils homepage it says "What do i need to know to get started?" and the requirement about the SideviewUtils module is one of the four bullets there. (The other three bullets just tell you to read certain important docs a bit first, to always use the docs and examples when you start using a new Sideview module, and to get on our mailing list. )

0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...