Refine your search:

When using an entitySelectLister ... does the entityPath have to be a saved search name? or can i use a searchTemplate or something equiv.

asked 01 Jun '10, 18:49

hiddenkirby's gravatar image

hiddenkirby
33916
accept rate: 14%


One Answer:

It needs to be the virtual "path" of a Splunk object type or type. This can be a specific object, or the parent path (relative to the root of the services namespace). So for example saved/searches, saved/eventtypes, data/indexes. The path is the one you'd use to enumerate the object(s) under the REST API (relative to the namespace root again).

link

answered 01 Jun '10, 23:26

gkanapathy's gravatar image

gkanapathy ♦
26.3k1622
accept rate: 42%

how would one figure this out on his own? other than trying to interpret examples in search?

(02 Jun '10, 15:24) hiddenkirby

is there any specific documentation?

(02 Jun '10, 15:25) hiddenkirby

Closest is http://www.splunk.com/base/Documentation/4.1.2/Developer/ModuleReference#EntitySelectLister is the closest, and notes that entityPath should be a valid entity path such as saved/searches. http://www.splunk.com/base/Documentation/4.1.2/Developer/HowToUseListers#EntityLinkLister mentions use to access objects via REST endpoints. However, the REST management API (as opposed to the query API) is not currently published though it can be browsed on https://splunkhost:8089/services

(02 Jun '10, 15:45) gkanapathy ♦

or maybe where i can find the entity "admin/distsearch-peer" .. maybe then i can try to backwards-translate some of this advanced xml.

(02 Jun '10, 15:47) hiddenkirby

oh ok this is helpful... thank you :)

(02 Jun '10, 15:47) hiddenkirby
Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×325
×161
×104
×40

Asked: 01 Jun '10, 18:49

Seen: 622 times

Last updated: 01 Jun '10, 23:26

Copyright © 2005-2012 Splunk, Inc. All rights reserved.