Dashboards & Visualizations

How to display saved search in dashboard panel

jangid
Builder

Hi

I created a splunk app, everything is fine but I can't see my saved search in any menu of app.
How do I provide this functionality in app so user can save their search and same time they can see in panel.

similar to regular splunk search app.

another question is how to load my saved search in flashtimeline?

Thanks

0 Karma
1 Solution

sideview
SplunkTrust
SplunkTrust

As far as seeing saved searches in the app menu, the file that controls what links appear in the app menu is at

$SPLUNK_HOME/etc/apps/<appname>/default/data/ui/nav/default.xml

And my guess is that your app's default.xml file doesn't have a <saved source="unclassified" /> node in it?

You can read more about this here:

http://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/BuildNavigation

View solution in original post

sideview
SplunkTrust
SplunkTrust

As far as seeing saved searches in the app menu, the file that controls what links appear in the app menu is at

$SPLUNK_HOME/etc/apps/<appname>/default/data/ui/nav/default.xml

And my guess is that your app's default.xml file doesn't have a <saved source="unclassified" /> node in it?

You can read more about this here:

http://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/BuildNavigation

jangid
Builder

Yes you are right.
Thanks 🙂

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...