Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Populating Search bar from Sideview utils created chart

$
0
0

Hi All,

I'm having some trouble trying to populate a search bar with details from a chart. I've looked at

http://splunk-base.splunk.com/answers/63886/i-just-need-to-see-a-simple-example-of-using-clickvalue-where-my-summary-chart-can-be-used-to-drill-down-to-raw-events

However, when I use the click.searchTerms parameter it doesnt' seem to work. My page does appear but the search field is not populated.

Here's an excerpt of my code

<param name="html">Login Details</param>
<module name="Search">
   <param name="search">host=example *example2* $ABC$ |rex field=_raw "Auth: (?<authentication>[^\(|\:]*)"|rex mode=sed field=authentication "s/\s*$$//g" | timechart count(authentication) by authentication |fields - NULL</param>
   <module name="JobProgressIndicator">
      <module name="HiddenChartFormatter">
         <param name="primaryAxisTitle.text">Time</param>
         <param name="chart">column</param>
         <param name="charting.layout.splitSeries">True</param>
         <param name="chartTitle">Login Details</param>
         <module name="FlashChart">
            <param name="height">400px</param>
            <module name="Redirector">
               <param name="url">flashtimeline</param>
               <param name="popup">True</param>
               <param name="arg.q">search $click.searchTerms$</param>
            </module>
         </module>
      </module>
   </module>
</module>

Can anyone offer any advice?

Thanks,

Steve


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>