Splunk Search

populatingSearch not working -- Search works as standalone search

neiljpeterson
Communicator

Very simple search string which works fine in free search. Similar searches like this work fine for other fields. The fields do not populate. The search is definitely completing, I even tried to limit it to a shorter time with to no effect.

What am I missing here?

   <form>
      <label>Server Selector</label>
      <description>Displaying all active application servers with logged events going back 30 days</description>
      <!-- Do not need a Search Button. Inputs search when changed -->
      <fieldset autoRun="true" submitButton="false">
        <!-- Specify search when changed for the inputs -->
        <input type="radio" token="app_server" searchWhenChanged="true">
          <label>Select a Server:</label>
          <choice value="something">something</choice>
          <populatingSearch fieldForValue="app_server" fieldForLabel="app_server" earliest="-30d" latest="now">
            <![CDATA[host=* | stats dc(host) by host]]>
          </populatingSearch>
        </input>
      </fieldset>
    </form>
Tags (2)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

Your search yields two fields, host and dc(host). However, your radio input is looking for a field called app_server.

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

Your search yields two fields, host and dc(host). However, your radio input is looking for a field called app_server.

neiljpeterson
Communicator

Doh! Thank you. Works perfectly now!

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...