Splunk Search

Add hidden search string to flashtimeline view

christian_l
Path Finder

Hi there,

I'd like to modify the default search form of Splunk (flashtimeline view) for a new app.
Therefore I'd like to add some search-strings to the search-field. These search-strings shouldn't be seen by the user. I think this would be a task for HiddenIntention module but read this module is deprecated, so I don't want to use it for a new app.
How can the task be done without the HiddenIntention module?

Regards,
Christian

0 Karma

sowings
Splunk Employee
Splunk Employee

In the near term, you could certainly continue to use an intention; I've done this for precisely the reasons you describe. I placed an addterm intention in a local/ copy of the flashtimeline view for my app. Below is the module block I used:


<module name="ConvertToIntention">
<param name="intention">
<param name="name">addterm</param>
<param name="arg">
<param name="index">test-*</param>
</param>
</param>

I placed this as a child of my <SubmitButton>, and closed the tags appropriately.

0 Karma
Get Updates on the Splunk Community!

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...