Design form searches
Design form searches
Form searches are simplified search interfaces that help guide users in the creation of specific kinds of searches. They can include things like:
- Open fields that take specific field values (such as user names or ID numbers) and can also display default values.
- Dropdown lists containing dynamically defined collections of search terms.
- Radio buttons that force the choice of particular field values (such as error codes like "404," "500," or "503").
- Multiple result panels that take the values received from one form and plug them into various hidden searches that in turn generate different kinds of charts and reports.
Form searches are created with XML code similar to that used for the construction of dashboards in Splunk. For more information, see the "Forms: an introduction" chapter of the Developer manual.
This documentation applies to the following versions of Splunk: 4.1 , 4.1.1 , 4.1.2 , 4.1.3 , 4.1.4 , 4.1.5 , 4.1.6 , 4.1.7 , 4.1.8 , 4.2 , 4.2.1 , 4.2.2 , 4.2.3 , 4.2.4 , 4.2.5 , 4.3 , 4.3.1 , 4.3.2 View the Article History for its revisions.