topic Dropdown with eventtypes in All Apps and Add-ons

Dropdown with eventtypes

dackamen — Wed, 07 Jan 2015 12:38:38 GMT

Is there a way to create dropdown box where you can select one of all the eventtypes?

I currently have this but it takes long time and resources to collect and display all the eventtypes:

  <input type="dropdown" token="field2">
    <label>Eventtype</label>
    <populatingSearch fieldForValue="eventtype">index=* | stats count by host, eventtype</populatingSearch>
  </input>

Is it possible at all or no?

Re: Dropdown with eventtypes

Raghav2384 — Wed, 07 Jan 2015 13:06:39 GMT

Try narrowing it down to eventtypes field only

Index= * |fields eventtype|top 25 eventtypes

Keep changing the top x
Thanks,
Raghav

Re: Dropdown with eventtypes

gabetheISguy — Wed, 07 Jan 2015 13:08:06 GMT

Yes! It is

Here is a Sample

<input type="dropdown" token="eventtype" searchWhenChanged="false">
<label>Select an Event Type to proceed</label>
<choice value="*">All</choice>
<populatingSearch fieldForLabel="eventtype" fieldForValue="eventtype">
<![CDATA[index="xxxxxxxindex" sourcetype=xxxxxx | stats count by eventtype | dedup eventtype | fields eventtype]]>
</populatingSearch>
<default>*</default>
</input>

Re: Dropdown with eventtypes

Raghav2384 — Wed, 07 Jan 2015 13:20:05 GMT

Try it without stats and host.

Index =x sourcetype=x|top 25 eventtypes

Re: Dropdown with eventtypes

somesoni2 — Wed, 07 Jan 2015 16:14:11 GMT

The fastest way to do it is using REST API calls. Try this

 <input type="dropdown" token="field2">
<label>Eventtype</label>
<populatingSearch fieldForValue="eventtype">| rest /services/saved/eventtypes | table title | rename title as eventtype</populatingSearch>
</input>