Dashboards & Visualizations

How do I get each unique value for a field to appear in a drop-down list?

brutecat
Path Finder

As much as I have tried every variant in the potential answers, I can't make this work. I have the following code:

    <input type="dropdown" token="machine_tok" searchWhenChanged="true">
  <label>Select a machine</label>
        <prefix>Machine_Name="</prefix>
  <suffix>"</suffix>

  <choice value="*">ND001913</choice>
   <default>ND001913</default>

     <search>
     <query>index=nextgen_machine | stats values(Machine_Name) as machines</query>


     </search>
     <fieldForLabel>machine</fieldForLabel>
    <fieldForValue>machine</fieldForValue>

    </input>

Which displays the default value of ND001913. The other values are found, but presented as a comma delimited list as only one single other value. How to I get this to return one item in the drop-down for one unique value?

Tags (2)
0 Karma
1 Solution

gyslainlatsa
Motivator

hi,
Do not use values()

try like this

 <input type="dropdown" token="machine_tok" searchWhenChanged="true">
   <label>Select a machine</label>
         <prefix>Machine_Name="</prefix>
         <suffix>"</suffix>

    <choice value="*">ND001913</choice>
    <default>ND001913</default>

      <search>
      <query>index=nextgen_machine | stats count by Machine_Name </query>

      </search>
      <fieldForLabel>Machine_Name</fieldForLabel>
     <fieldForValue>Machine_Name</fieldForValue>
     </input>

if the field name in your events is rather machine instead of Machine_Name, must be replaced Machine_Name by machine

View solution in original post

0 Karma

gyslainlatsa
Motivator

hi,
Do not use values()

try like this

 <input type="dropdown" token="machine_tok" searchWhenChanged="true">
   <label>Select a machine</label>
         <prefix>Machine_Name="</prefix>
         <suffix>"</suffix>

    <choice value="*">ND001913</choice>
    <default>ND001913</default>

      <search>
      <query>index=nextgen_machine | stats count by Machine_Name </query>

      </search>
      <fieldForLabel>Machine_Name</fieldForLabel>
     <fieldForValue>Machine_Name</fieldForValue>
     </input>

if the field name in your events is rather machine instead of Machine_Name, must be replaced Machine_Name by machine

0 Karma

brutecat
Path Finder

gyslainlatsa,

Thanks so much. I thought I had tried this. The behaviour of 'values' does not seem consistent here.

Anyway, thanks again,

Stan

0 Karma

gyslainlatsa
Motivator

Your are welcome, don't forget to vote my answers

Get Updates on the Splunk Community!

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...

New Articles from Academic Learning Partners, Help Expand Lantern’s Use Case Library, ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Your Guide to SPL2 at .conf24!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...