Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?xml version="1.0"?>
- <form>
- <label>test form with singles</label>
- <fieldset autoRun="true">
- <input type="dropdown" token="host">
- <label>Choose host</label>
- <prefix>host="</prefix>
- <suffix>"</suffix>
- <choice value="*">All</choice>
- <default>*</default>
- <populatingSearch fieldForValue="host" fieldForLabel="host">| metadata type=hosts index=_internal | dedup host | table host | sort host</populatingSearch>
- </input>
- <input type="dropdown" token="sourcetype">
- <label>Choose Sourcetype</label>
- <prefix>sourcetype="</prefix>
- <suffix>"</suffix>
- <choice value="*">All</choice>
- <default>*</default>
- <populatingSearch fieldForValue="sourcetype" fieldForLabel="sourcetype">| metadata type=sourcetypes index=_internal | dedup sourcetype | table sourcetype | sort sourcetype</populatingSearch>
- </input>
- <input type="time">
- <default>Last 4 hours</default>
- </input>
- </fieldset>
- <searchTemplate>index=_internal $host$ $sourcetype$</searchTemplate>
- <row>
- <single>
- <title> Earliest Event</title>
- <searchPostProcess> | stats earliest(_time) as earliest | fieldformat earliest=strftime(earliest, "%c")</searchPostProcess>
- </single>
- <single>
- <title>Latest Event</title>
- <searchPostProcess> | stats latest(_time) as latest | fieldformat latest=strftime(latest, "%c")</searchPostProcess>
- </single>
- </row>
- </form>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement