Splunk Search

I have this dashboard which only displays 10 rows and one page in the result. How do i get it to give me option to go to the next page.

nehal_shah
Explorer

FX : Client Log Snapshot

<param name="name">user</param><param name="label">Janus Username</param>
<param name="default"></param><module name="TextField"><param name="name">freetext</param><param name="label">Search</param>
<param name="default">Snapshot</param>
<module name="TimeRangePicker">
  <module name="Search" layoutPanel="panel_row2_col1" group="Results">

    <param name="search">index=jpmmclientlog source="*/$user$.log" $freetext$ | rex "(?s)napshot:(?&lt;png&gt;.*)"</param>
    <module name="JobProgressIndicator"></module>

    <module name="Table">
      <param name="hiddenFields">png</param>
      <module name="HTML" layoutPanel="panel_row3_col1" group="Selected Snapshot">
        <param name="html">
          <![CDATA[<div align="center"><img src="data:image/png;base64,$row.fields.png$"/></div>]]>
        </param>
      </module>
    </module>
  </module>
</module></module></module></view>
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi nehal_shah,
Extended XML is deprecated by Splunk, this dashboard should be converted in Simple XML.
So you can managenumber of lines and pagination by web interface.
To convert this dashboard in Simple XML, you have to create a new one using the same search of the panel of the original dashboard and add the same inputs.
Bye.
Giuseppe

0 Karma
Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...