Dashboards & Visualizations

Simple Dropdown

DTERM
Contributor

I'm trying to create a dropdown based on the following query:

index=MyApp tgtHostname=$tgtHostname$

The form is there and the default value of "any" seems to work. However the dropdown is not populated. Any idea why? Thanks.

<form>
  <label>My form search</label>
  <searchTemplate>index=MyApp tgtHostname=$tgtHostname$</searchTemplate>

  <fieldset>
    <input type="dropdown" token="tgtHostname">
       <label>Select the hostname</label>
       <populatingSearch fieldForValue="tgtHostname" fieldForLabel="tgtHostname"><![CDATA[index=MyApp tgtHostname=$tgtHostname$]]></populatingSearch>
     <default>somehost.somedomain.com</default>
     <choice value="*">Any</choice>
    </input>
  </fieldset>

  <row>
   <table>
     <title>Host Names</title>
     <option name="showPager">true</option>
   </table>
   </row>
</form>
Tags (1)
0 Karma
1 Solution

RicoSuave
Builder
<form>
<label>My form search</label> 
<searchTemplate>index=MyApp tgtHostname=$tgtHostname$</searchTemplate> 
<fieldset> 
 <input type="dropdown" token="tgtHostname"> 
   <label>Select the hostname</label> 
     <populatingSearch fieldForValue="tgtHostname" fieldForLabel="tgtHostname"><![CDATA[index=MyApp | stats count by tgtHostname]]></populatingSearch> 
     <default>somehost.somedomain.com</default> 
     <choice value="*">Any</choice> 
 </input> 
</fieldset> 
<row> 
<title>Host Names</title> 
<option name="showPager">true</option>
</row> 
</form>

View solution in original post

RicoSuave
Builder
<form>
<label>My form search</label> 
<searchTemplate>index=MyApp tgtHostname=$tgtHostname$</searchTemplate> 
<fieldset> 
 <input type="dropdown" token="tgtHostname"> 
   <label>Select the hostname</label> 
     <populatingSearch fieldForValue="tgtHostname" fieldForLabel="tgtHostname"><![CDATA[index=MyApp | stats count by tgtHostname]]></populatingSearch> 
     <default>somehost.somedomain.com</default> 
     <choice value="*">Any</choice> 
 </input> 
</fieldset> 
<row> 
<title>Host Names</title> 
<option name="showPager">true</option>
</row> 
</form>

RicoSuave
Builder

Watch your syntax as well. It's not shown here since the code sample widget didn't work for me, but make sure you have an upper Case T in searchTemplate, Uppercase F and L in fieldForLabel and uppercase F and V in fieldForValue

0 Karma

RicoSuave
Builder

I have no clue why the code sample box isn't working for me, but that should do it for you.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...