Hi ,
I have a parent search which retrieves list of values in a tabular format. On clicking any of the values the events corresponding to this value(child search) is retreived in another table.
However not all the events are being retrieved. There is only a certain sub set of events which are being displayed. When the same child query is executed on the flash timeline the results are completely different.
I am using a events viewer module to display the results of the child search.Below is the code.
<view isVisible="true" onunloadCancelJobs="true" template="dashboard.html">
<label>List Events</label>
<module name="AccountBar" layoutPanel="appHeader"/>
<module name="AppBar" layoutPanel="navigationHeader"/>
<module name="SideviewUtils" layoutPanel="appHeader" />
<module name="Message" layoutPanel="messaging">
<param name="filter">*</param>
<param name="maxSize">1</param>
<param name="clearOnJobDispatch">False</param>
</module>
<module name="TitleBar" layoutPanel="viewHeader">
<param name="actionsMenuFilter">dashboard</param>
</module>
<module name="HTML" layoutPanel="panel_row1_col1">
<param name="html">
<![CDATA[ Select/Search For Filtering Logs ]]>
</param>
</module>
<module name="HTML" layoutPanel="panel_row1_col1">
<param name="html"><![CDATA[
<table id='tbalign' width='100%' border ='0'><tr><td align='top' style='width:45%'>
]]></param>
</module>
<module name="TextField" layoutPanel="panel_row1_col1" autoRun="False">
<param name="name">search_filter</param>
<param name="width">200px</param>
<!--<param name="label">Search</param> -->
<param name="template">$value$</param>
<module name="HTML" layoutPanel="panel_row1_col1">
<param name="html">
<![CDATA[</td><td align='top' style='width:40%'> ]]>
</param>
</module>
<module name="TimeRangePicker" layoutPanel="panel_row1_col1">
<param name="selected">All time</param>
<module name="HTML" layoutPanel="panel_row1_col1">
<param name="html">
<![CDATA[</td><td align='top' style='width:15%'> ]]>
</param>
</module>
<module name="Button" >
<param name="allowSoftSubmit">True</param>
<module name="HTML" layoutPanel="panel_row1_col1">
<param name="html">
<![CDATA[</td></tr></table> ]]>
</param>
</module>
<module name="Search" autoRun="True">
<param name="search">
index="xyz" sourcetype="log:detailed" name=*$search_filter$* | dedup name | sort name|rename name AS Test | fields Test
</param>
<module name="HTML" layoutPanel="panel_row1_col1">
<param name="html">
<![CDATA[ Queue List]]>
</param>
</module>
<module name="SimpleResultsHeader" layoutPanel="panel_row1_col1">
<param name="entityName">events</param>
<param name="headerFormat">No of results (%(count)s)</param>
<module name="Pager">
<param name="entityName">events</param>
<param name="maxPages">10</param>
<module name="SimpleResultsTable" layoutPanel="panel_row1_col1">
<param name="entityName">events</param>
<param name="drilldown">row</param>
<param name="fields">Test</param>
<module name="Search" autoRun="True">
<param name="search">index=xyz name="$click.fields.Test$" </param>
<module name="JobProgressIndicator" layoutPanel="panel_row2_col1"></module>
<module name="HTML" layoutPanel="panel_row2_col1">
<param name="html">
<![CDATA[Events for selected Value: <b>$click.fields.Test$ </b>]]>
</param>
</module>
<module name="SimpleResultsHeader" layoutPanel="panel_row2_col1">
<param name="entityName">events</param>
<param name="headerFormat">No of results (%(count)s)</param>
</module>
<module name="Pager" layoutPanel="panel_row2_col1">
<param name="entityName">events</param>
<module name="EventsViewer" layoutPanel="panel_row2_col1">
<param name="displayRowNumbers">True</param>
<param name="enableEventActions">False</param>
</module>
</module>
</module>
</module>
</module>
</module>
</module>
</module>
</module>
</module>
</view>
... View more