Databases Reference
In-Depth Information
<module name="ViewstateAdapter">
<module name="HiddenFieldPicker">
<module name="JobProgressIndicator">
<module name="EnablePreview">
<module name="HiddenChartFormatter">
<module name="JSChart">
<module name="ConvertToDrilldownSearch">
<module name="ViewRedirector">
<module name="ViewRedirectorLink">
A reference for the modules installed in your instance of
Splunk is available at
/modules
. In my case, the full URL
is
http://mysplunkserver:8000/modules
.
Let's step through these modules in turn and discuss what they are each
accomplishing:
•
ExtendedFieldSearch
: This provides a textbox for entry. The parameters
for this module are complicated, and represent arguably the most
complicated aspect of advanced XML—
intentions
. Intentions affect child
modules, specifically
HiddenSearch
. We will cover intentions later.
•
TimeRangePicker
: This provides the standard time picker. It affects child
HiddenSearch
modules that do not have times specified either using
param
values or in the query itself. The precedence of times used in a query are:
° Times specified in the query itself
° Times specified via earliest and latest
param
values to the
search module
° A value provided by
TimeRangePicker
•
SubmitButton
: This draws the
Search
button and fires off any child search
modules when clicked.
•
HiddenSearch
: As we saw before, this runs a query and produces events for
downstream modules. In this case,
autoRun
is set to
false
, so that the query
waits for the user.
•
ViewstateAdapter
: A
viewstate
describes what settings a user has selected
in the GUI, for instance, sort order, page size, or chart type. Any time you
change a chart setting or pick a time range, you create a viewstate that is
saved by Splunk. This module is used to access an existing viewstate,
or to suppress specific viewstate settings. By suppressing specific settings,
the default or specified values of child modules will be used instead.
This module is rarely needed unless you are using a saved search with
an associated viewstate.
Search WWH ::
Custom Search