Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Mastering Splunk

You're reading from   Mastering Splunk Optimize your machine-generated data effectively by developing advanced analytics with Splunk

Arrow left icon
Product type Paperback
Published in Dec 2014
Publisher
ISBN-13 9781782173830
Length 344 pages
Edition 1st Edition
Languages
Tools
Arrow right icon
Author (1):
Arrow left icon
James D. Miller James D. Miller
Author Profile Icon James D. Miller
James D. Miller
Arrow right icon
View More author details
Toc

Table of Contents (13) Chapters Close

Preface 1. The Application of Splunk FREE CHAPTER 2. Advanced Searching 3. Mastering Tables, Charts, and Fields 4. Lookups 5. Progressive Dashboards 6. Indexes and Indexing 7. Evolving your Apps 8. Monitoring and Alerting 9. Transactional Splunk 10. Splunk – Meet the Enterprise A. Quick Start Index

Form searching


Some Splunk dashboards contain search forms. A search form is just another Splunk view (and is actually very similar to a Spunk dashboard) which provides an interface for users to supply values to one or more search terms.

Using textboxes, drop-down menus, or radio buttons, a search form allows users to focus only on what they are searching for (and the results, which can be displayed in the tables, event listings, or any of the visualizations available), as discussed here:

  • Textboxes: They take specific field values or display a default value

  • Drop-down menus and lists: They contain dynamically defined collections of search terms

  • Radio buttons: They force to choose particular field values

  • Multiple result panels: They generate different kinds of visualizations

An example of a search form

Take an example of the following simple Splunk search pipeline:

sourcetype=TM1* Error

Based on the preceding Splunk search pipeline, we can use the Splunk search page to run the search and receive...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $19.99/month. Cancel anytime
Banner background image