Splunk Search

How to select all checkboxes in a form input by default?

mclane1
Path Finder

Hello,

I would like to know how select by default all checkboxes in input like this:

<input type="checkbox" token="hosts" searchWhenChanged="true" depends="somethig">
  <label>host filter</label>
  <search>
    <query>* myFilter...
      | stats by host 
      | table host 
      | sort host</query>
    <earliest>$time_tok.earliest$</earliest>
    <latest>$time_tok.latest$</latest>
  </search>
  <fieldForLabel>hosts</fieldForLabel>
  <fieldForValue>host</fieldForValue>
  <prefix>(</prefix>
  <valuePrefix>LIKE(host,"</valuePrefix>
  <valueSuffix>")</valueSuffix>
  <delimiter> OR </delimiter>
  <suffix>)</suffix>
</input>

I found that but, not friendly usage for client.

<input type="checkbox" token="hosts" searchWhenChanged="true" depends="somethig">
  <label>host filter</label>
  <search>
    <query>* myFilter...
      | stats by host 
      | table host 
      | sort host</query>
    <earliest>$time_tok.earliest$</earliest>
    <latest>$time_tok.latest$</latest>
  </search>
  <fieldForLabel>hosts</fieldForLabel>
  <fieldForValue>host</fieldForValue>
  <default>%</default>
  <choice value="%">All</choice>
  <prefix>(</prefix>
  <valuePrefix>LIKE(host,"</valuePrefix>
  <valueSuffix>")</valueSuffix>
  <delimiter> OR </delimiter>
  <suffix>)</suffix>
</input>

For this result :
alt text

0 Karma

cb_usps
Explorer

In it's simplest form, you use a comma separated list:

<input type="checkbox" token="field1">
  . . .
  <initialValue>a,b,c</initialValue>
</input>

In your case where you have a dynamically generated list, unless your host list does not change often, the only choice you have is to call the URL of the form with the checklist pre-populated, e.g.

I do this myself (with subsets of my entire host list), but I use multiselect instead of checkboxes - not sure if the URL syntax is the same or not. Here's how I build the URL dynamically:

<panel>
  <html>
    <div> <a href="your_dashboard_name?form.hosts=$hosts$" target="_blank">Name of URL in First Dashboard</a> </div>
  </html>
</panel>

The $hosts$ token in this code block is the token name of the multiselect in the first dashboard.

0 Karma

NOUMSSI
Builder

Hi;
Try this

 <input type="checkbox" token="hosts" searchWhenChanged="true" depends="somethig">
   <label>host filter</label>
   <search>
     <query>* myFilter...
       | stats by host 
       | table host 
       | sort host</query>
     <earliest>$time_tok.earliest$</earliest>
     <latest>$time_tok.latest$</latest>
   </search>
   <fieldForLabel>host</fieldForLabel>
   <fieldForValue>host</fieldForValue>
   <default></default>
   <choice value="*">All</choice>
   <prefix>(</prefix>
   <valuePrefix>host="</valuePrefix>
   <valueSuffix>")</valueSuffix>
   <delimiter> OR </delimiter>
   <suffix>)</suffix>
 </input>
0 Karma

mclane1
Path Finder

Hello,

Thanks for this post. I have seen this solution (my post) but not user friendly.
I don't want other checkbox, just all checkbox unknown checked.

Thanks

Not possible ? End user just would like to unckeck box.

0 Karma
Get Updates on the Splunk Community!

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Dashboard Challenge and Watch the .conf24 Global Broadcast!

The Splunk Community Dashboard Challenge is still happening, and it's not too late to enter for the week of ...