I have a chart that uses a dropdown to statically populate different client names in a search. Right now, they are all entered in manually. However, I would just like to do a search that brings back all the clients. Right now, I have the following search string entered under "dynamic options" when editing the dropdown menu:
client_name=*
| chart values(client_name) as client_names
Then I have the client_name entered as both Label and Value.
Why isn't this working?
I could not find documentation on what data type the search string should be (guessing chart is not correct, though it returns the right list) or what the labels and values should look like. Please help me with any documentation to help. Have not been able to find anything that helps me use this interface.
@jamesandy51,
In the dynamic option , try this search and use client_name as Label & Value
client_name=* | stats count by client_name
Here is a documentation which you could refer to https://docs.splunk.com/Documentation/Splunk/7.2.0/Viz/FormEditor#Specify_dynamic_options
@jamesandy51,
In the dynamic option , try this search and use client_name as Label & Value
client_name=* | stats count by client_name
Here is a documentation which you could refer to https://docs.splunk.com/Documentation/Splunk/7.2.0/Viz/FormEditor#Specify_dynamic_options