Dashboards & Visualizations

Select first value of populating search

C_Sparn
Communicator

Hello,

I´m looking for another option or possibility to select the first value of a populating search of a dropdown than using "true". Important is that the first value is selected automatically every time the populating search stopped running! And is it possible to always hide the dropdown in the dashboard in simple xml?

Thanks
Greetings

0 Karma

ankireddy007
Path Finder

You can use tag

    <input type="dropdown" token="t_Bank">
          <label>Choose Bank</label>
          <choice value="*">All</choice>
          <default>*</default>
          <populatingSearch fieldForValue="Bank" fieldForLabel="Bank">
            <![CDATA[search -----------------]]>
          </populatingSearch>
        </input>
0 Karma

C_Sparn
Communicator

Hello,

no sorry thats not possible, because so I just get * as result for default. But what I need is the first searched value as default. Is it possible, if I use advanced XML or HTML?

0 Karma

C_Sparn
Communicator

Hello,

I found out that "true" is working. But just if the site is getting refreshed. Is it possible to force refreshing the site without losing the selection in the other input fields?

0 Karma

C_Sparn
Communicator

Hello,


2014


Quarter 1

index = any |stats count|eval new = $time$$year$)
The token "new" gives me 1 value which is a combination of the other dropdowns.An Example is 'Quarter_1(2014)'

0 Karma

somesoni2
Revered Legend

It's the only option to select the first option in Simple xml (at least the only one I know of). Could you provide the xml you're using?

0 Karma

C_Sparn
Communicator

Hello,

yes I know! I am using version 6.0.2. But it is not working anyway.

0 Karma

nfilippi_splunk
Splunk Employee
Splunk Employee

Note that was added in Splunk 6.0.2

somesoni2
Revered Legend

What version of Splunk you use?

0 Karma

C_Sparn
Communicator

The problem is that it is not working for me. I always get just one value as result of the populating search, so it would be enough to just get this value automatically selected.

0 Karma

somesoni2
Revered Legend

Whats the problem with "true"?

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...