Splunk Search

SearchRadioLister in a view

LauraBre
Communicator

Hello,

I have a problem with "SearchRadioLister". In the documentation, it says SearchRadioLister is the same thing that SearchSelectLister but when I modify the module name SearchSelectLister by SearchRadioLister, it doesn't work. What have I to modify in the syntax?

Thx by advance,

Laura

 <module name="SearchRadioLister">
            <param name="settingToCreate">Requester</param>
            <param name="label">Requester</param>
            <param name="staticFieldsToDisplay">
              <list>
                <param name="label">All</param>
                <param name="value">*</param>
              </list>
              <list>
                <param name="label">fr18126</param>
                <param name="value">fr18126</param>
              </list>
          <list>
                <param name="label">a187571</param>
                <param name="value">a187571</param>
              </list>
            </param>
        <param name="selected">All</param>
            <module name="ConvertToIntention">
              <param name="settingToConvert">Requester</param>
              <param name="intention">
                <param name="name">addterm</param>
                <param name="arg">
                  <param name="Requester">$target$</param>
                </param>
                <param name="flags"><list>indexed</list></param>
              </param>
Tags (1)
0 Karma

Lamar
Splunk Employee
Splunk Employee

Laura,
Try using the module EntityRadioLister instead of SearchRadioLister.

The SearchRadioLister is expecting the results of a search to populate the different radio buttons. In the instance you've provided you're defining a list of label/values.

0 Karma

Lamar
Splunk Employee
Splunk Employee

Sorry Laura, how is it not working? Is the view not rendering or are your radio buttons not getting rendered correctly?

0 Karma

LauraBre
Communicator

This is my xml with EntityRadioLister bu it doesn't work and I don't understand why. Thanks by advance.

    <module name="EntityRadioLister">
       <param name="settingToCreate">Requester</param>
            <param name="label">Requester</param>
            <param name="staticFieldsToDisplay">
              <list>
                <param name="label">a187571</param>
                <param name="value">a187571</param>
              </list>
             ...
            </param>
   </module>
0 Karma

Lamar
Splunk Employee
Splunk Employee

Yeah, you have to embed a HiddenSearch or HiddenSavedSearch that will drive the SearchRadioLister.

0 Karma

LauraBre
Communicator

Thx for your answer. I tested with static value but I want to recover dynamic value extracted of a search later. Do you know how can do it???

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...