SHOW:
|
|
- or go back to the newest paste.
1 | <form> | |
2 | <label>Test</label> | |
3 | ||
4 | <fieldset> | |
5 | ||
6 | <input type="dropdown" token="search_for"> | |
7 | <label>Pick one:</label> | |
8 | <choice value="source">source</choice> | |
9 | <choice value="sourcetype">sourcetype</choice> | |
10 | <choice value="host">host</choice> | |
11 | <default>source</default> | |
12 | </input> | |
13 | ||
14 | <input type="dropdown" token="src"> | |
15 | <label>Select a sourcetype</label> | |
16 | <populatingSearch fieldForValue="sourcetype" fieldForLabel="sourcetype"> | |
17 | ||
18 | <![CDATA[| metadata type=sourcetypes index=main]]> | |
19 | ||
20 | </populatingSearch> | |
21 | <default>access_combined</default> | |
22 | </input> | |
23 | </fieldset> | |
24 | ||
25 | <row> | |
26 | <chart> | |
27 | <title>Sourcetype column chart</title> | |
28 | <searchTemplate> | |
29 | sourcetype=$src$ | timechart count | |
30 | </searchTemplate> | |
31 | </chart> | |
32 | <chart> | |
33 | <title>Sourcetype bar</title> | |
34 | <searchTemplate> | |
35 | sourcetype=$src$ | timechart count | |
36 | </searchTemplate> | |
37 | <option name="charting.chart">bar</option> | |
38 | </chart> | |
39 | </row> | |
40 | ||
41 | <row> | |
42 | <single> | |
43 | <searchString> | |
44 | sourcetype=$src$ | stats count | |
45 | </searchString> | |
46 | <title>Log events</title> | |
47 | <option name="afterLabel">total logging events</option> | |
48 | <option name="beforeLabel">Found</option> | |
49 | </single> | |
50 | ||
51 | <table> | |
52 | <title>Sourcetype Table</title> | |
53 | <searchTemplate> | |
54 | sourcetype=$src$ | table _time date_hour method host source sourcetype | |
55 | </searchTemplate> | |
56 | ||
57 | <drilldown> | |
58 | <link field="source"> | |
59 | <![CDATA[/app/search/flashtimeline?q=sourcetype=$form.src$ source=$row.source$ date_hour=$row.date_hour$]]> | |
60 | </link> | |
61 | <link field="host"><![CDATA[http://www.google.com/search?hl=en&q=$row.host$]]></link> | |
62 | </drilldown> | |
63 | </table> | |
64 | </row> | |
65 | </form> |