<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to populate second dropdown(source) list based on the first dropdown(host) selection? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-to-populate-second-dropdown-source-list-based-on-the-first/m-p/373853#M67749</link>
    <description>&lt;P&gt;got it thanks&lt;/P&gt;</description>
    <pubDate>Wed, 02 May 2018 15:09:18 GMT</pubDate>
    <dc:creator>navd</dc:creator>
    <dc:date>2018-05-02T15:09:18Z</dc:date>
    <item>
      <title>How to populate second dropdown(source) list based on the first dropdown(host) selection?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-populate-second-dropdown-source-list-based-on-the-first/m-p/373849#M67745</link>
      <description>&lt;P&gt;Here is my sample code that I am using &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;form&amp;gt;
   &amp;lt;label&amp;gt;raw data&amp;lt;/label&amp;gt;
    &amp;lt;fieldset submitButton="true" autoRun="true"&amp;gt;
&amp;lt;input type="dropdown" token="host" searchWhenChanged="true"&amp;gt;
  &amp;lt;label&amp;gt;Select Host Name&amp;lt;/label&amp;gt;
  &amp;lt;choice value="*"&amp;gt;ALL&amp;lt;/choice&amp;gt;
  &amp;lt;fieldForLabel&amp;gt;host&amp;lt;/fieldForLabel&amp;gt;
  &amp;lt;fieldForValue&amp;gt;host&amp;lt;/fieldForValue&amp;gt;
  &amp;lt;search&amp;gt;
    &amp;lt;query&amp;gt;index=abcd |dedup host&amp;lt;/query&amp;gt;
    &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
    &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
  &amp;lt;/search&amp;gt;
&amp;lt;/input&amp;gt;
&amp;lt;input type="time" token="time_range" searchWhenChanged="true"&amp;gt;
  &amp;lt;label&amp;gt;Select Time Range&amp;lt;/label&amp;gt;
  &amp;lt;default&amp;gt;
    &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
    &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
  &amp;lt;/default&amp;gt;
&amp;lt;/input&amp;gt;
&amp;lt;input type="dropdown" token="source" searchWhenChanged="true"&amp;gt;
  &amp;lt;label&amp;gt;Select Source&amp;lt;/label&amp;gt;
  &amp;lt;choice value="*"&amp;gt;ALL&amp;lt;/choice&amp;gt;
  &amp;lt;fieldForLabel&amp;gt;source&amp;lt;/fieldForLabel&amp;gt;
  &amp;lt;fieldForValue&amp;gt;source&amp;lt;/fieldForValue&amp;gt;
  &amp;lt;search&amp;gt;
    &amp;lt;query&amp;gt;index=abcd |dedup source&amp;lt;/query&amp;gt;
    &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
    &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
  &amp;lt;/search&amp;gt;
&amp;lt;/input&amp;gt;
  &amp;lt;/fieldset&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
     &amp;lt;event&amp;gt;
    &amp;lt;search&amp;gt;
      &amp;lt;query&amp;gt;index="abcd" host=$host$&amp;lt;/query&amp;gt;
      &amp;lt;earliest&amp;gt;$time_range.earliest$&amp;lt;/earliest&amp;gt;
      &amp;lt;latest&amp;gt;$time_range.latest$&amp;lt;/latest&amp;gt;
    &amp;lt;/search&amp;gt;
    &amp;lt;option name="list.drilldown"&amp;gt;full&amp;lt;/option&amp;gt;
    &amp;lt;option name="refresh.display"&amp;gt;progressbar&amp;lt;/option&amp;gt;
  &amp;lt;/event&amp;gt;
  &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Wed, 02 May 2018 14:30:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-populate-second-dropdown-source-list-based-on-the-first/m-p/373849#M67745</guid>
      <dc:creator>navd</dc:creator>
      <dc:date>2018-05-02T14:30:42Z</dc:date>
    </item>
    <item>
      <title>Re: How to populate second dropdown(source) list based on the first dropdown(host) selection?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-populate-second-dropdown-source-list-based-on-the-first/m-p/373850#M67746</link>
      <description>&lt;P&gt;Update your search for source and include host token&lt;BR /&gt;
&lt;PRE&gt;&lt;BR /&gt;
     &lt;QUERY&gt;index=abcd host=$host$ |dedup source&lt;/QUERY&gt;&lt;BR /&gt;
&lt;/PRE&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 02 May 2018 14:33:33 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-populate-second-dropdown-source-list-based-on-the-first/m-p/373850#M67746</guid>
      <dc:creator>pradeepkumarg</dc:creator>
      <dc:date>2018-05-02T14:33:33Z</dc:date>
    </item>
    <item>
      <title>Re: How to populate second dropdown(source) list based on the first dropdown(host) selection?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-populate-second-dropdown-source-list-based-on-the-first/m-p/373851#M67747</link>
      <description>&lt;P&gt;I updated the search for source and I could see source based on host selected, but when I choose any option from the source I couldn,t see the results/events based on the source selected&lt;/P&gt;</description>
      <pubDate>Wed, 02 May 2018 14:58:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-populate-second-dropdown-source-list-based-on-the-first/m-p/373851#M67747</guid>
      <dc:creator>navd</dc:creator>
      <dc:date>2018-05-02T14:58:06Z</dc:date>
    </item>
    <item>
      <title>Re: How to populate second dropdown(source) list based on the first dropdown(host) selection?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-populate-second-dropdown-source-list-based-on-the-first/m-p/373852#M67748</link>
      <description>&lt;P&gt;because you are not using source filter in your final search&lt;/P&gt;

&lt;P&gt;add source=$source$ in your final search&lt;/P&gt;</description>
      <pubDate>Wed, 02 May 2018 15:05:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-populate-second-dropdown-source-list-based-on-the-first/m-p/373852#M67748</guid>
      <dc:creator>pradeepkumarg</dc:creator>
      <dc:date>2018-05-02T15:05:14Z</dc:date>
    </item>
    <item>
      <title>Re: How to populate second dropdown(source) list based on the first dropdown(host) selection?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-populate-second-dropdown-source-list-based-on-the-first/m-p/373853#M67749</link>
      <description>&lt;P&gt;got it thanks&lt;/P&gt;</description>
      <pubDate>Wed, 02 May 2018 15:09:18 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-populate-second-dropdown-source-list-based-on-the-first/m-p/373853#M67749</guid>
      <dc:creator>navd</dc:creator>
      <dc:date>2018-05-02T15:09:18Z</dc:date>
    </item>
  </channel>
</rss>

