When using the Splunk Web Framework to create a global search, which is the correct post-process syntax for the base search shown below?
var searchmain = new SearchManager{{
id: “base-search”,
search: “index= internal | head 10 | fields “*”, preview: true, cache: true }};
Select an option, then click Submit answer.
-
○
var mypostproc1 = new PostProcessManager {{ id: “post1”, managerid: “base-search”, search: “| stats count by sourcetype” }};
-
○
var mypostproc1 = new PostProcessManager{{ id: “post1”, managerid: “base”,
search: “| stats count by sourcetype”
}}; -
○
var mypostproc1 = new PostProcess{{ id: “post1”, managerid: “base-search”,
search: “| search stats count by sourcetype” }}; -
○
You cannot create global searches in the Splunk Web Framework.