<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Dropdown field not getting populated by populatingSearch in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dropdown-field-not-getting-populated-by-populatingSearch/m-p/184173#M11397</link>
    <description>&lt;P&gt;Use &lt;CODE&gt;table block&lt;/CODE&gt; instead of &lt;CODE&gt;stats values(block)&lt;/CODE&gt; after the &lt;CODE&gt;dedup block&lt;/CODE&gt; phrase of the populating search.&lt;/P&gt;</description>
    <pubDate>Fri, 15 Aug 2014 20:50:38 GMT</pubDate>
    <dc:creator>aweitzman</dc:creator>
    <dc:date>2014-08-15T20:50:38Z</dc:date>
    <item>
      <title>Dropdown field not getting populated by populatingSearch</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dropdown-field-not-getting-populated-by-populatingSearch/m-p/184172#M11396</link>
      <description>&lt;P&gt;Hi, &lt;/P&gt;

&lt;P&gt;The following code produces results (via searchTemplate), but does not populate my dropdown menu. Data is stored as lines of comma delimited key=value pairs, e.g., colour=red,block=lab,corner=100c. Note that the searches are identical for the searchTemplate and populatingSearch inputs.&lt;/P&gt;

&lt;BLOCKQUOTE&gt;
&lt;FORM&gt;
    &lt;LABEL&gt;Sample form&lt;/LABEL&gt;
    &lt;SEARCHTEMPLATE&gt;index=test_index3  | fields block | dedup block | stats values(block)  
    &lt;/SEARCHTEMPLATE&gt;
    &lt;FIELDSET autorun="true" submitbutton="false"&gt;
        &lt;INPUT type="dropdown" token="blocks" searchwhenchanged="True" /&gt;
            &lt;CHOICE value="*"&gt;All&lt;/CHOICE&gt;
            &lt;POPULATINGSEARCH fieldforvalue="block" fieldforlabel="block"&gt;
                index=test_index3  | fields block | dedup block | stats values(block)
            &lt;/POPULATINGSEARCH&gt;
            &lt;LABEL&gt;Block&lt;/LABEL&gt;
            &lt;DEFAULT&gt;*&lt;/DEFAULT&gt;
        
    &lt;/FIELDSET&gt;
    &lt;ROW&gt;
        &lt;TABLE&gt;
            &lt;TITLE&gt;$blocks$&lt;/TITLE&gt;
        &lt;/TABLE&gt;
    &lt;/ROW&gt; &lt;/FORM&gt;
&lt;/BLOCKQUOTE&gt;

&lt;P&gt;Am I misusing the dropdown/populatingSearch syntax somehow?&lt;/P&gt;</description>
      <pubDate>Fri, 15 Aug 2014 20:47:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dropdown-field-not-getting-populated-by-populatingSearch/m-p/184172#M11396</guid>
      <dc:creator>asherman</dc:creator>
      <dc:date>2014-08-15T20:47:42Z</dc:date>
    </item>
    <item>
      <title>Re: Dropdown field not getting populated by populatingSearch</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dropdown-field-not-getting-populated-by-populatingSearch/m-p/184173#M11397</link>
      <description>&lt;P&gt;Use &lt;CODE&gt;table block&lt;/CODE&gt; instead of &lt;CODE&gt;stats values(block)&lt;/CODE&gt; after the &lt;CODE&gt;dedup block&lt;/CODE&gt; phrase of the populating search.&lt;/P&gt;</description>
      <pubDate>Fri, 15 Aug 2014 20:50:38 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dropdown-field-not-getting-populated-by-populatingSearch/m-p/184173#M11397</guid>
      <dc:creator>aweitzman</dc:creator>
      <dc:date>2014-08-15T20:50:38Z</dc:date>
    </item>
    <item>
      <title>Re: Dropdown field not getting populated by populatingSearch</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dropdown-field-not-getting-populated-by-populatingSearch/m-p/184174#M11398</link>
      <description>&lt;P&gt;am using below code&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;  &amp;lt;label&amp;gt;Email ID&amp;lt;/label&amp;gt;
  &amp;lt;search&amp;gt;
    &amp;lt;query&amp;gt;index=snow description=*CPU* number=INC0010007 | table sys_created_by&amp;lt;/query&amp;gt;
    &amp;lt;earliest&amp;gt;0&amp;lt;/earliest&amp;gt;
    &amp;lt;latest&amp;gt;&amp;lt;/latest&amp;gt;
  &amp;lt;/search&amp;gt;
  &amp;lt;fieldForLabel&amp;gt;emailid&amp;lt;/fieldForLabel&amp;gt;
  &amp;lt;fieldForValue&amp;gt;emailid&amp;lt;/fieldForValue&amp;gt;
&amp;lt;/input&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;but my dropdown isn't getting populated whereas the query gives me result. &lt;/P&gt;</description>
      <pubDate>Fri, 04 Nov 2016 14:18:35 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dropdown-field-not-getting-populated-by-populatingSearch/m-p/184174#M11398</guid>
      <dc:creator>surekhasplunk</dc:creator>
      <dc:date>2016-11-04T14:18:35Z</dc:date>
    </item>
  </channel>
</rss>

