All Apps and Add-ons

What is the purpose of fieldforLabel attribute?

rroberts
Splunk Employee
Splunk Employee

Ive changed the value for fieldforLabel attribute on the populatingSearch element to something arbitrary and it seems to make no difference. What does this attribute actually do? It is listed as mandatory in the XML reference docs.

0 Karma

somesoni2
SplunkTrust
SplunkTrust

If you are configuring an input like dropdown/checkbox, the fieldforValue defines which field value from the pupulatingSearch result will be used as token value and the fieldforLabel define which field value from the popultingSearch result will be used to display in the UI. E.g. showing label "All" in dropdown and using "*" as token value.
I tested with Splunk 5.0.5 and it doesn't work if the fieldforLabel column is not present in the result. What Splunk version you're using?

strive
Influencer

It is used to display Label names. Say for example Names in a dropdown.

  <fieldset>
      <input type="dropdown" token="host" searchWhenChanged="true">
          <label>Host:</label>
          <default>SomeValue</default>
          <populatingSearch fieldForValue="host" fieldForLabel="host">| metadata type=hosts                                        index=os</populatingSearch>
          <choice value="*">all</choice>
       </input>
0 Karma

strive
Influencer

The fieldForLabel and fieldForValue should be in resultset of your search.
Hope this will help you http://answers.splunk.com/answers/151189/how-can-i-get-the-current-time-in-hhmmss-as-the-default-val...

0 Karma

rroberts
Splunk Employee
Splunk Employee

I tried something similar but saw no difference.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...