Splunk Search

How to select all checkboxes in a form input by default?

mclane1
Path Finder

Hello,

I would like to know how select by default all checkboxes in input like this:

<input type="checkbox" token="hosts" searchWhenChanged="true" depends="somethig">
  <label>host filter</label>
  <search>
    <query>* myFilter...
      | stats by host 
      | table host 
      | sort host</query>
    <earliest>$time_tok.earliest$</earliest>
    <latest>$time_tok.latest$</latest>
  </search>
  <fieldForLabel>hosts</fieldForLabel>
  <fieldForValue>host</fieldForValue>
  <prefix>(</prefix>
  <valuePrefix>LIKE(host,"</valuePrefix>
  <valueSuffix>")</valueSuffix>
  <delimiter> OR </delimiter>
  <suffix>)</suffix>
</input>

I found that but, not friendly usage for client.

<input type="checkbox" token="hosts" searchWhenChanged="true" depends="somethig">
  <label>host filter</label>
  <search>
    <query>* myFilter...
      | stats by host 
      | table host 
      | sort host</query>
    <earliest>$time_tok.earliest$</earliest>
    <latest>$time_tok.latest$</latest>
  </search>
  <fieldForLabel>hosts</fieldForLabel>
  <fieldForValue>host</fieldForValue>
  <default>%</default>
  <choice value="%">All</choice>
  <prefix>(</prefix>
  <valuePrefix>LIKE(host,"</valuePrefix>
  <valueSuffix>")</valueSuffix>
  <delimiter> OR </delimiter>
  <suffix>)</suffix>
</input>

For this result :
alt text

0 Karma

cb_usps
Explorer

In it's simplest form, you use a comma separated list:

<input type="checkbox" token="field1">
  . . .
  <initialValue>a,b,c</initialValue>
</input>

In your case where you have a dynamically generated list, unless your host list does not change often, the only choice you have is to call the URL of the form with the checklist pre-populated, e.g.

I do this myself (with subsets of my entire host list), but I use multiselect instead of checkboxes - not sure if the URL syntax is the same or not. Here's how I build the URL dynamically:

<panel>
  <html>
    <div> <a href="your_dashboard_name?form.hosts=$hosts$" target="_blank">Name of URL in First Dashboard</a> </div>
  </html>
</panel>

The $hosts$ token in this code block is the token name of the multiselect in the first dashboard.

0 Karma

NOUMSSI
Builder

Hi;
Try this

 <input type="checkbox" token="hosts" searchWhenChanged="true" depends="somethig">
   <label>host filter</label>
   <search>
     <query>* myFilter...
       | stats by host 
       | table host 
       | sort host</query>
     <earliest>$time_tok.earliest$</earliest>
     <latest>$time_tok.latest$</latest>
   </search>
   <fieldForLabel>host</fieldForLabel>
   <fieldForValue>host</fieldForValue>
   <default></default>
   <choice value="*">All</choice>
   <prefix>(</prefix>
   <valuePrefix>host="</valuePrefix>
   <valueSuffix>")</valueSuffix>
   <delimiter> OR </delimiter>
   <suffix>)</suffix>
 </input>
0 Karma

mclane1
Path Finder

Hello,

Thanks for this post. I have seen this solution (my post) but not user friendly.
I don't want other checkbox, just all checkbox unknown checked.

Thanks

Not possible ? End user just would like to unckeck box.

0 Karma
Get Updates on the Splunk Community!

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...