Refine your search:

I am using two dropdowns in a view in my applicationa. First drop down is getting populated and I want the second dropdown to get populated based on the item selected in first drop down. But, the second dropdown is not getting populated.

I am posting the code here : enter code here <view template="dashboard.html" stylesheet="dashboard.css"> <label>Custom Severity Reports </label> <module name="AccountBar" layoutpanel="appHeader"/> <module name="AppBar" layoutpanel="navigationHeader"/>

<module name="Message" layoutpanel="messaging"> <param name="filter">*</param> <param name="clearOnJobDispatch">False</param> <param name="maxSize">1</param> </module>

<module name="TitleBar" layoutpanel="viewHeader"> <param name="actionsMenuFilter">dashboard</param> </module>

<module name="StaticContentSample" layoutpanel="panel_row1_col1"> <param name="text">Select the Box Unit Name from the Drop-Down Menu </param> </module>

<module name="SearchSelectLister" layoutpanel="panel_row1_col1" autorun="True"> <param name="searchWhenChanged">True</param> <param name="settingToCreate">uname_setting</param> <param name="label">Unit Name :</param> <param name="savedSearch">test search</param> <param name="searchFieldsToDisplay"> <list> <param name="label">unit_name</param> <param name="value">unit_name</param> </list> </param> <module name="ConvertToIntention"> <param name="settingToConvert">uname_setting</param> <param name="intention"> <param name="name">stringreplace</param> <param name="arg"> <param name="unit_name"> <param name="value">$target$</param> </param> </param> </param>

            <module name="SearchSelectLister" layoutPanel="panel_row1_col1" autoRun="True">
                    <param name="searchWhenChanged">True</param>
                    <param name="settingToCreate">service_setting</param>
                    <param name="label">Service :</param>
                    <param name="search">sourcetype="firewall" | eval ip_port = app_ip +":"+ app_port | chart count over ip_port</param>
                    <param name="searchFieldsToDisplay">
                                    <param name="label">service_ipport</param>
                                    <param name="value">service_ipport</param>

                    <module name="ConvertToIntention">
                            <param name="settingToConvert">service_setting</param>
                            <param name="intention">
                                    <param name="name">stringreplace</param>
                                    <param name="arg">
                                            <param name="service_ipport">
                                                    <param name="value">$target$</param>

    <module name="StaticContentSample" layoutPanel="panel_row1_col1">
            <param name="text">You can adjust the time range of the audit reports
                    by selecting your desired time using the picker below.</param>

<module name="TimeRangePicker" layoutpanel="panel_row1_col1" autorun="True"> <param name="selected">Last 60 minutes</param> <param name="searchWhenChanged">True</param>

    <module name="HiddenSearch" layoutPanel="panel_row2_col1" autoRun="True">
            <param name="search">sourcetype="firewall" Attack_Description !=NULL | eval ip_port = app_ip +":"+ app_port | where ip_port = "$service_ipport$" |stats count BY Attack_Severity</param>
            <module name="JobProgressIndicator"/>
            <module name="HiddenChartFormatter">
                    <param name="chartTitle">Attacks with Custom Severity - Count</param>
                    <param name="chart">pie</param>
                    <module name="FlashChart">
                            <param name="width">100%</param>
                            <param name="height">360px</param>
                            <module name="ConvertToDrilldownSearch">
                                    <module name="ViewRedirector">
                                            <param name="viewTarget">flashtimeline</param>
                                            <param name="popup">true</param>

</module> </module> </module> </module> </module> </view>

Please help !! Thanks !!!

asked 07 Sep '12, 07:25

ranjyotiprakash's gravatar image

accept rate: 45%

Am i missing something ?

(07 Sep '12, 07:32) ranjyotiprakash

One Answer:

Get the UI Examples app from Splunkbase if you haven't already.

There's an example in there showing a SearchSelectLister that responds to an intention from a module above. Advanced XML > Lister Examples > 2 listers driving multiple elements.

Technically the example shows a StaticSelect above and a SearchSelectLister below, but it's the second one that's wrong here.

Short version -- you're missing the following param on your SearchSelectLister.

<param name="applyOuterIntentionsToInternalSearch">True</param>

but go back and read the UI Examples example because there may be other problems here that you can clear up by returning to docs/examples for a bit. (I'm very rusty with the listers because the Sideview Utils app replaces them with its Pulldown module, and removes intentions from the picture entirely. )


answered 07 Sep '12, 09:44

sideview's gravatar image

sideview ♦
accept rate: 47%

I tried that already but, the seconnd dropdown was not getting populated. So I removed that just to check whether it is getting loaded when individual search is done . But, even in this case as well it is not getting loaded. Is any thing else that I can look to solve this problem ? Thanks !!

(08 Sep '12, 02:33) ranjyotiprakash

Well, one thing that springs out, is that the search populating the dropdown has a field called "ipport", but the dropdown itself is looking for a field called "service_ipport", which will then never be there. But in general, yes my advice is to crib from the working examples in the UI Examples app. By working backwards and comparing you can always find where things have gone off track.

(08 Sep '12, 09:37) sideview ♦

Thanks a lot !!!!

(09 Sep '12, 21:45) ranjyotiprakash
Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions



Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported



Asked: 07 Sep '12, 07:25

Seen: 889 times

Last updated: 09 Sep '12, 21:45

Copyright © 2005-2014 Splunk Inc. All rights reserved.