Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

PostProcess ViewRedirectorLink

$
0
0

Hi, I am trying to figure out a way where for a PostProcess search, ViewRedirectorLink popup displays exact search instead of base search in the new window. For e.g. take a look at below snippet:

Both the "View results" link open up with: "index=_internal source="*web_access.log" | stats count sum(bytes) as totalBytes by file, status"

<view template="dashboard.html"> <label>My PostProcess ViewRedirectorLink</label> <module name="AccountBar" layoutpanel="appHeader"/> <module name="AppBar" layoutpanel="appHeader"/> <module name="SideviewUtils" layoutpanel="appHeader"/> <module name="Message" layoutpanel="messaging"> <param name="filter"></param> <param name="maxSize">2</param> <param name="clearOnJobDispatch">False</param> </module> <module name="URLLoader" layoutpanel="panel_row1_col1" autorun="True"> <module name="Search" layoutpanel="panel_row2_col1"> <param name="search">index=_internal source="web_access.log" | stats count sum(bytes) as totalBytes by file, status</param> <param name="earliest">-6h</param> <param name="latest">now</param> <module name="PostProcess" layoutpanel="panel_row3_col1"> <param name="search">| stats sum(totalBytes) as totalBytes by file | sort - totalBytes</param> <module name="Pager"> <param name="count">5</param> <module name="Table"/> </module> <module name="ViewRedirectorLink"> <param name="viewTarget">flashtimeline</param> <param name="popup">true</param> </module> </module> <module name="PostProcess" layoutpanel="panel_row3_col2"> <param name="search">| stats sum(count) as count by status | sort - count</param> <module name="FlashChart"/> <module name="ViewRedirectorLink"> <param name="viewTarget">flashtimeline</param> <param name="popup">true</param> </module> </module> </module> </module> </view>


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>