Dashboards & Visualizations

autoRun="false" not stopping Dashboard from auto running

_gkollias
Builder

Hi All,

I'm having a continuous issue which sort of popped out of nowhere. I have a dashboard which is essentially a functional email form. Tokens are passed over from the previous search page which help the send to work properly. The page should not render any results until the search button is hit, and I've added autoRun="false" in to the simpleXML. This isn't stopping the page from auto running and attempting to send without consent.

Here is my simpleXML for the page:

<form stylesheet="cg_ereceipts_resubmit.css">
<label>Re-Submit e-Receipt</label>
<fieldset autoRun="false" submitButton="true">
    <input type="text" token="emailTo">
        <label>To(required):</label>
        <default>$emailTo$</default>
    </input>
    <input type="text" token="emailCC">
        <label>CC:</label>
        <default/>
    </input>
    <input type="text" token="emailBcc">
        <label>BCC:</label>
        <default/>
    </input>
    <input type="text" token="emailSubject">
        <label>Subject(required):</label>
        <default/>
    </input>
    <input type="text" token="emailBody">
        <label>Body(required):</label>
      <default/>
    </input>
</fieldset>
<row>
    <table id="ereceipt_resubmit">
        <title>Your Re-Submit Results:</title>
        <searchString> <![CDATA[  |stats count as dummy_field
| eval bp_context_id="$bp_context_id$"
| eval PID_OUT="$PID_OUT$"
| eval TPCode="$TPCode$"
| eval OrderNumber="$OrderNumber$"
| eval ShipmentNumber="$ShipmentNumber$"
| eval OrderLink="$OrderLink$"
| eval emailTo="$emailTo$"
| eval emailCC="$emailCC$"
| eval emailBcc="$emailBcc$"
| eval emailSubject="$emailSubject$"
| eval emailBody="$emailBody$"
| fields - dummy_field
| fillnull value=""
| cgereceiptsresubmit
| eval responseMessage=if(responseMessage=="",ctgResponse,responseMessage)
| spath input=ctgResponse output=responseMessage path="BODY.TABLE.TR.TD{2}"
| table resubmit_url,ctg_response, resubmit_error
| rename resubmit_url as "Re-Submit URL", ctg_response as "CTG Response", resubmit_error as "Re-Submit Error Message"]]>
        </searchString>
        <option name="rowNumbers">true</option>
        <option name="wrap">true</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">none</option>
        <option name="count">10</option>
    </table>
</row>
</form>

Any thoughts on what may be causing the page to autoRun even though autoRun="false" is implemented?

Thanks in advance!

Tags (1)
0 Karma

sowings
Splunk Employee
Splunk Employee

I can't comment specifically on the failure of "autoRun=false" to do what it means, but if you reference the tokens of your form within the search (e.g. index=email to=$emailTo$), the search can't run until the inputs are provided by the user. This means that you'll see "Search is waiting for input" in the results area until the user satisfies all of the referenced tokens.

You haven't provided the search string (or the formatting of the forum has eaten it), so it's hard to know whether you've referenced any of the tokens in your search.

EDIT: With the search string now visible, perhaps it's the fact that you've provided default values (though empty) for each of the tokens? (I'll give this a try later and observe the behavior.)

sowings
Splunk Employee
Splunk Employee

Thanks, Martin.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Quite a lot had been eaten, I've made the forum regurgitate that... loads of tokens in the search string.

0 Karma

_gkollias
Builder

Hi Martin, have you had a chance to observe these results? Your help would be greatly appreciated.

Thanks!

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...