Documentation > Splunk > Knowledge Manager Manual > Design form searches

Knowledge Manager Manual

 


Welcome to knowledge management
Organize and administrate knowledge objects
Data interpretation: Fields and field extractions
Data classification: Event types and transactions
Data enrichment: Lookups and workflow actions
Data normalization: Tags and aliases
Save, share, and manage your searches and search jobs
Use data summaries to accelerate searches

Design form searches

Design form searches

Form searches are simplified search interfaces that help guide users in the creation of specific kinds of searches. They can include things like:

  • Open fields that take specific field values (such as user names or ID numbers) and can also display default values.
  • Dropdown lists containing dynamically defined collections of search terms.
  • Radio buttons that force the choice of particular field values (such as error codes like "404," "500," or "503").
  • Multiple result panels that take the values received from one form and plug them into various hidden searches that in turn generate different kinds of charts and reports.

Form searches are created with XML code similar to that used for the construction of dashboards in Splunk. For more information, see the "Build and edit forms with simple XML" chapter of the Splunk Data Visualizations manual.

Retrieved from "http://docs.splunk.com/Documentation/Splunk/5.0.2/Knowledge/Designformsearches"

This documentation applies to the following versions of Splunk: 5.0 , 5.0.1 , 5.0.2 View the Article History for its revisions.


You must be logged into splunk.com in order to post comments. Log in now.

Was this documentation topic helpful?

If you'd like to hear back from us, please provide your email address:

We'd love to hear what you think about this topic or the documentation as a whole. Feedback you enter here will be delivered to the documentation team.

Feedback submitted, thanks!