Splunk Search

How to execute javascript after a search?

big_nuggets
Explorer

Hi,

I've copied the Search & Reporting app folder as my own app in /etc/apps, now I want to add some JS to be executed after a search has finished. Everything I've tried hasn't worked, anyone ever figure out a way to do this?

I've tried changing isdashboard to True in search.xml, then specifying a JS file in script="myjs.js", it doesn't get executed, then I tried this:

<module name="AppBar" layoutPanel="appHeader">
    <param name="timsharkjs">timshark/timshark.js</param>
</module>

within search.xml, as I had seen another app (sideview_utils) doing something like this , didn't work.

Any help would be greatly appreciated, thank you.

Labels (1)
0 Karma

espirde
Engager

You can try to use an event listener when a specific search is done.

SearchID.on("search:done", function () {
// function here
}

gabriel_vasseur
Contributor

This doesn't work. It produces an error when the javascript is loaded.

I've tried:

    $("#NameSearchID").on( "search:done", function() {

Referring to this in the simple XML:

  <row>
    <panel>
      <table>
        <search id="NameSearchID">
...

Do you have a full working example?

0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...