<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: how to add dropdown field  to advanced view? in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/how-to-add-dropdown-field-to-advanced-view/m-p/11619#M130</link>
    <description>&lt;P&gt;First off, I'm curious about why you're trying to do this in the advanced XML?  It's much easier in the simplified XML but there might be something specific you're trying to accomplish by using the advanced XML.  What is that?&lt;/P&gt;

&lt;P&gt;Now, to answer your question.  If I take one of the simplified XML views from the UI examples that includes dropdowns, then append ?showsource=true to the URI, I can see the advanced XML behind the dropdowns.  It looks like:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;view autoCancelInterval="90" isVisible="true" objectMode="SimpleForm" onunloadCancelJobs="true" template="dashboard.html"&amp;gt;
 &amp;lt;label&amp;gt;Simple select drop down&amp;lt;/label&amp;gt;
  &amp;lt;module name="AccountBar" layoutPanel="appHeader"/&amp;gt;
  &amp;lt;module name="AppBar" layoutPanel="navigationHeader"/&amp;gt;
  &amp;lt;module name="Message" layoutPanel="messaging"&amp;gt;
    &amp;lt;param name="filter"&amp;gt;*&amp;lt;/param&amp;gt;
    &amp;lt;param name="clearOnJobDispatch"&amp;gt;False&amp;lt;/param&amp;gt;
    &amp;lt;param name="maxSize"&amp;gt;1&amp;lt;/param&amp;gt;
  &amp;lt;/module&amp;gt;
  &amp;lt;module name="Message" layoutPanel="messaging"&amp;gt;
    &amp;lt;param name="filter"&amp;gt;splunk.search.job&amp;lt;/param&amp;gt;
    &amp;lt;param name="clearOnJobDispatch"&amp;gt;True&amp;lt;/param&amp;gt;
    &amp;lt;param name="maxSize"&amp;gt;1&amp;lt;/param&amp;gt;
  &amp;lt;/module&amp;gt;
  &amp;lt;module name="TitleBar" layoutPanel="viewHeader"&amp;gt;
    &amp;lt;param name="actionsMenuFilter"&amp;gt;dashboard&amp;lt;/param&amp;gt;
  &amp;lt;/module&amp;gt;
  &amp;lt;module name="HiddenSearch" layoutPanel="viewHeader"&amp;gt;
    &amp;lt;param name="search"&amp;gt;index=_internal source=*metrics.log group="per_sourcetype_thruput" series=$series$ | fields eps, kb, kbps&amp;lt;/param&amp;gt;
    &amp;lt;param name="earliest"&amp;gt;-30d&amp;lt;/param&amp;gt;
    &amp;lt;param name="latest"&amp;gt;-0d&amp;lt;/param&amp;gt;
      &amp;lt;module name="SearchSelectLister"&amp;gt;
        &amp;lt;param name="staticFieldsToDisplay"&amp;gt;
         &amp;lt;list&amp;gt;
          &amp;lt;param name="value"&amp;gt;*&amp;lt;/param&amp;gt;
          &amp;lt;param name="label"&amp;gt;Any&amp;lt;/param&amp;gt;
         &amp;lt;/list&amp;gt;
       &amp;lt;/param&amp;gt;
       &amp;lt;param name="search"&amp;gt;index=_internal source=*metrics.log group="per_sourcetype_thruput" | top series&amp;lt;/param&amp;gt;
       &amp;lt;param name="label"&amp;gt;Select series&amp;lt;/param&amp;gt;
       &amp;lt;param name="settingToCreate"&amp;gt;series_setting&amp;lt;/param&amp;gt;
       &amp;lt;param name="searchFieldsToDisplay"&amp;gt;
        &amp;lt;list&amp;gt;
         &amp;lt;param name="value"&amp;gt;series&amp;lt;/param&amp;gt;
         &amp;lt;param name="label"&amp;gt;series&amp;lt;/param&amp;gt;
        &amp;lt;/list&amp;gt;
       &amp;lt;/param&amp;gt;
       &amp;lt;param name="searchWhenChanged"&amp;gt;False&amp;lt;/param&amp;gt;
        &amp;lt;module name="ConvertToIntention"&amp;gt;
         &amp;lt;param name="settingToConvert"&amp;gt;series_setting&amp;lt;/param&amp;gt;
         &amp;lt;param name="intention"&amp;gt;
           &amp;lt;param name="name"&amp;gt;stringreplace&amp;lt;/param&amp;gt;
           &amp;lt;param name="arg"&amp;gt;
             &amp;lt;param name="series"&amp;gt;
              &amp;lt;param name="fillOnEmpty"&amp;gt;True&amp;lt;/param&amp;gt;
              &amp;lt;param name="value"&amp;gt;$target$&amp;lt;/param&amp;gt;
            &amp;lt;/param&amp;gt;
          &amp;lt;/param&amp;gt;
         &amp;lt;/param&amp;gt;
         &amp;lt;module name="SubmitButton"&amp;gt;
          &amp;lt;param name="allowSoftSubmit"&amp;gt;True&amp;lt;/param&amp;gt;
          &amp;lt;param name="label"&amp;gt;Search&amp;lt;/param&amp;gt;
           &amp;lt;module name="JobStatus"&amp;gt;
            &amp;lt;module name="EnablePreview" layoutPanel="panel_row1_col1" group="Matching events"&amp;gt;
             &amp;lt;param name="groupLabel"&amp;gt;Matching events&amp;lt;/param&amp;gt;
             &amp;lt;param name="enable"&amp;gt;True&amp;lt;/param&amp;gt;
             &amp;lt;param name="display"&amp;gt;False&amp;lt;/param&amp;gt;
              &amp;lt;module name="SimpleResultsTable"&amp;gt;
               &amp;lt;param name="count"&amp;gt;50&amp;lt;/param&amp;gt;
               &amp;lt;param name="drilldown"&amp;gt;row&amp;lt;/param&amp;gt;
               &amp;lt;param name="allowTransformedFieldSelect"&amp;gt;True&amp;lt;/param&amp;gt;
                &amp;lt;module name="ConvertToDrilldownSearch"&amp;gt;
                 &amp;lt;module name="ViewRedirector"&amp;gt;
                  &amp;lt;param name="viewTarget"&amp;gt;flashtimeline&amp;lt;/param&amp;gt;
                 &amp;lt;/module&amp;gt;
                &amp;lt;/module&amp;gt;
              &amp;lt;/module&amp;gt;
             &amp;lt;module name="ViewRedirectorLink"&amp;gt;
              &amp;lt;param name="viewTarget"&amp;gt;flashtimeline&amp;lt;/param&amp;gt;
             &amp;lt;/module&amp;gt;
        &amp;lt;/module&amp;gt;
      &amp;lt;/module&amp;gt;
    &amp;lt;/module&amp;gt;
  &amp;lt;/module&amp;gt;
&amp;lt;/module&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;
&lt;/P&gt;</description>
    <pubDate>Sat, 17 Apr 2010 01:45:25 GMT</pubDate>
    <dc:creator>emma</dc:creator>
    <dc:date>2010-04-17T01:45:25Z</dc:date>
    <item>
      <title>how to add dropdown field  to advanced view?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/how-to-add-dropdown-field-to-advanced-view/m-p/11618#M129</link>
      <description>&lt;P&gt;I could not find an example for adding a dropdown field in advanced view.&lt;/P&gt;

&lt;P&gt;In my advanced view I would like to replace the regular input field with a drowpdown holding the field names on which the user can execute searches.
Example: 
  User selects B_NUMBER in dropdown and in the input field types 02155555.&lt;/P&gt;

&lt;P&gt;(B_NUMBER="02155555" to search)&lt;/P&gt;

&lt;P&gt;Currently I use the following view to search on 2 fields.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;view template="dashboard.html"  onunloadCancelJobs="False" autoCancelInterval="100"&amp;gt;  
    &amp;lt;label&amp;gt;client custom search&amp;lt;/label&amp;gt;
    &amp;lt;module name="HiddenSearch" layoutPanel="panel_row2_col1" autoRun="true"&amp;gt;
        &amp;lt;param name="search"&amp;gt;search host=client_transformed index=client  A_NUMBER=$anum$ B_NUMBER=$bnum$ | fields I/O  A_NUMBER A_NUMBER_NAMED  B_NUMBER B_NUMBER_NAMED DATE TIME LOCATION BAND DURATION CPM  ex_vatcharge  | fields - _time&amp;lt;/param&amp;gt;
        &amp;lt;module name="ExtendedFieldSearch"&amp;gt;
            &amp;lt;param name="intention"&amp;gt;
                &amp;lt;param name="name"&amp;gt;stringreplace&amp;lt;/param&amp;gt;
                &amp;lt;param name="arg"&amp;gt;
                    &amp;lt;param name="anum"&amp;gt;
                        &amp;lt;param name="default"&amp;gt;*&amp;lt;/param&amp;gt;
                    &amp;lt;/param&amp;gt;
                &amp;lt;/param&amp;gt;
            &amp;lt;/param&amp;gt;
            &amp;lt;param name="replacementMap"&amp;gt;
                &amp;lt;param name="arg"&amp;gt;
                    &amp;lt;param name="anum"&amp;gt;
                        &amp;lt;param name="value"&amp;gt;&amp;lt;/param&amp;gt;
                    &amp;lt;/param&amp;gt;
                &amp;lt;/param&amp;gt;
            &amp;lt;/param&amp;gt;
            &amp;lt;param name="field"&amp;gt;ANUMBER&amp;lt;/param&amp;gt;
            &amp;lt;module name="ExtendedFieldSearch"&amp;gt;
                &amp;lt;param name="intention"&amp;gt;
                    &amp;lt;param name="name"&amp;gt;stringreplace&amp;lt;/param&amp;gt;
                    &amp;lt;param name="arg"&amp;gt;
                        &amp;lt;param name="bnum"&amp;gt;
                            &amp;lt;param name="default"&amp;gt;*&amp;lt;/param&amp;gt;
                        &amp;lt;/param&amp;gt;
                    &amp;lt;/param&amp;gt;
                &amp;lt;/param&amp;gt;
                &amp;lt;param name="replacementMap"&amp;gt;
                    &amp;lt;param name="arg"&amp;gt;
                        &amp;lt;param name="bnum"&amp;gt;
                            &amp;lt;param name="value"&amp;gt;&amp;lt;/param&amp;gt;
                        &amp;lt;/param&amp;gt;
                    &amp;lt;/param&amp;gt;
                &amp;lt;/param&amp;gt;
                &amp;lt;param name="field"&amp;gt;BNUMBER&amp;lt;/param&amp;gt;
                &amp;lt;module name="Paginator"&amp;gt;
                    &amp;lt;param name="count"&amp;gt;20&amp;lt;/param&amp;gt;
                    &amp;lt;param name="entityName"&amp;gt;results&amp;lt;/param&amp;gt;
                    &amp;lt;param name="maxPages"&amp;gt;10&amp;lt;/param&amp;gt;
                    &amp;lt;module name="SimpleResultsTable"&amp;gt;
                    &amp;lt;/module&amp;gt;
                &amp;lt;/module&amp;gt;
            &amp;lt;/module&amp;gt;
        &amp;lt;/module&amp;gt;
    &amp;lt;/module&amp;gt;
&amp;lt;/view&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Fri, 16 Apr 2010 19:57:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/how-to-add-dropdown-field-to-advanced-view/m-p/11618#M129</guid>
      <dc:creator>imrago</dc:creator>
      <dc:date>2010-04-16T19:57:57Z</dc:date>
    </item>
    <item>
      <title>Re: how to add dropdown field  to advanced view?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/how-to-add-dropdown-field-to-advanced-view/m-p/11619#M130</link>
      <description>&lt;P&gt;First off, I'm curious about why you're trying to do this in the advanced XML?  It's much easier in the simplified XML but there might be something specific you're trying to accomplish by using the advanced XML.  What is that?&lt;/P&gt;

&lt;P&gt;Now, to answer your question.  If I take one of the simplified XML views from the UI examples that includes dropdowns, then append ?showsource=true to the URI, I can see the advanced XML behind the dropdowns.  It looks like:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;view autoCancelInterval="90" isVisible="true" objectMode="SimpleForm" onunloadCancelJobs="true" template="dashboard.html"&amp;gt;
 &amp;lt;label&amp;gt;Simple select drop down&amp;lt;/label&amp;gt;
  &amp;lt;module name="AccountBar" layoutPanel="appHeader"/&amp;gt;
  &amp;lt;module name="AppBar" layoutPanel="navigationHeader"/&amp;gt;
  &amp;lt;module name="Message" layoutPanel="messaging"&amp;gt;
    &amp;lt;param name="filter"&amp;gt;*&amp;lt;/param&amp;gt;
    &amp;lt;param name="clearOnJobDispatch"&amp;gt;False&amp;lt;/param&amp;gt;
    &amp;lt;param name="maxSize"&amp;gt;1&amp;lt;/param&amp;gt;
  &amp;lt;/module&amp;gt;
  &amp;lt;module name="Message" layoutPanel="messaging"&amp;gt;
    &amp;lt;param name="filter"&amp;gt;splunk.search.job&amp;lt;/param&amp;gt;
    &amp;lt;param name="clearOnJobDispatch"&amp;gt;True&amp;lt;/param&amp;gt;
    &amp;lt;param name="maxSize"&amp;gt;1&amp;lt;/param&amp;gt;
  &amp;lt;/module&amp;gt;
  &amp;lt;module name="TitleBar" layoutPanel="viewHeader"&amp;gt;
    &amp;lt;param name="actionsMenuFilter"&amp;gt;dashboard&amp;lt;/param&amp;gt;
  &amp;lt;/module&amp;gt;
  &amp;lt;module name="HiddenSearch" layoutPanel="viewHeader"&amp;gt;
    &amp;lt;param name="search"&amp;gt;index=_internal source=*metrics.log group="per_sourcetype_thruput" series=$series$ | fields eps, kb, kbps&amp;lt;/param&amp;gt;
    &amp;lt;param name="earliest"&amp;gt;-30d&amp;lt;/param&amp;gt;
    &amp;lt;param name="latest"&amp;gt;-0d&amp;lt;/param&amp;gt;
      &amp;lt;module name="SearchSelectLister"&amp;gt;
        &amp;lt;param name="staticFieldsToDisplay"&amp;gt;
         &amp;lt;list&amp;gt;
          &amp;lt;param name="value"&amp;gt;*&amp;lt;/param&amp;gt;
          &amp;lt;param name="label"&amp;gt;Any&amp;lt;/param&amp;gt;
         &amp;lt;/list&amp;gt;
       &amp;lt;/param&amp;gt;
       &amp;lt;param name="search"&amp;gt;index=_internal source=*metrics.log group="per_sourcetype_thruput" | top series&amp;lt;/param&amp;gt;
       &amp;lt;param name="label"&amp;gt;Select series&amp;lt;/param&amp;gt;
       &amp;lt;param name="settingToCreate"&amp;gt;series_setting&amp;lt;/param&amp;gt;
       &amp;lt;param name="searchFieldsToDisplay"&amp;gt;
        &amp;lt;list&amp;gt;
         &amp;lt;param name="value"&amp;gt;series&amp;lt;/param&amp;gt;
         &amp;lt;param name="label"&amp;gt;series&amp;lt;/param&amp;gt;
        &amp;lt;/list&amp;gt;
       &amp;lt;/param&amp;gt;
       &amp;lt;param name="searchWhenChanged"&amp;gt;False&amp;lt;/param&amp;gt;
        &amp;lt;module name="ConvertToIntention"&amp;gt;
         &amp;lt;param name="settingToConvert"&amp;gt;series_setting&amp;lt;/param&amp;gt;
         &amp;lt;param name="intention"&amp;gt;
           &amp;lt;param name="name"&amp;gt;stringreplace&amp;lt;/param&amp;gt;
           &amp;lt;param name="arg"&amp;gt;
             &amp;lt;param name="series"&amp;gt;
              &amp;lt;param name="fillOnEmpty"&amp;gt;True&amp;lt;/param&amp;gt;
              &amp;lt;param name="value"&amp;gt;$target$&amp;lt;/param&amp;gt;
            &amp;lt;/param&amp;gt;
          &amp;lt;/param&amp;gt;
         &amp;lt;/param&amp;gt;
         &amp;lt;module name="SubmitButton"&amp;gt;
          &amp;lt;param name="allowSoftSubmit"&amp;gt;True&amp;lt;/param&amp;gt;
          &amp;lt;param name="label"&amp;gt;Search&amp;lt;/param&amp;gt;
           &amp;lt;module name="JobStatus"&amp;gt;
            &amp;lt;module name="EnablePreview" layoutPanel="panel_row1_col1" group="Matching events"&amp;gt;
             &amp;lt;param name="groupLabel"&amp;gt;Matching events&amp;lt;/param&amp;gt;
             &amp;lt;param name="enable"&amp;gt;True&amp;lt;/param&amp;gt;
             &amp;lt;param name="display"&amp;gt;False&amp;lt;/param&amp;gt;
              &amp;lt;module name="SimpleResultsTable"&amp;gt;
               &amp;lt;param name="count"&amp;gt;50&amp;lt;/param&amp;gt;
               &amp;lt;param name="drilldown"&amp;gt;row&amp;lt;/param&amp;gt;
               &amp;lt;param name="allowTransformedFieldSelect"&amp;gt;True&amp;lt;/param&amp;gt;
                &amp;lt;module name="ConvertToDrilldownSearch"&amp;gt;
                 &amp;lt;module name="ViewRedirector"&amp;gt;
                  &amp;lt;param name="viewTarget"&amp;gt;flashtimeline&amp;lt;/param&amp;gt;
                 &amp;lt;/module&amp;gt;
                &amp;lt;/module&amp;gt;
              &amp;lt;/module&amp;gt;
             &amp;lt;module name="ViewRedirectorLink"&amp;gt;
              &amp;lt;param name="viewTarget"&amp;gt;flashtimeline&amp;lt;/param&amp;gt;
             &amp;lt;/module&amp;gt;
        &amp;lt;/module&amp;gt;
      &amp;lt;/module&amp;gt;
    &amp;lt;/module&amp;gt;
  &amp;lt;/module&amp;gt;
&amp;lt;/module&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;
&lt;/P&gt;</description>
      <pubDate>Sat, 17 Apr 2010 01:45:25 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/how-to-add-dropdown-field-to-advanced-view/m-p/11619#M130</guid>
      <dc:creator>emma</dc:creator>
      <dc:date>2010-04-17T01:45:25Z</dc:date>
    </item>
    <item>
      <title>Re: how to add dropdown field  to advanced view?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/how-to-add-dropdown-field-to-advanced-view/m-p/11620#M131</link>
      <description>&lt;P&gt;The reason i am using advanced XML is because I want to have this form-search on the left column of my dashboard, and another form-search on the right column. Or is there another way to do this (2 columns dashboard) without using advanced xml?&lt;/P&gt;</description>
      <pubDate>Wed, 06 Apr 2011 21:53:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/how-to-add-dropdown-field-to-advanced-view/m-p/11620#M131</guid>
      <dc:creator>klee310</dc:creator>
      <dc:date>2011-04-06T21:53:46Z</dc:date>
    </item>
    <item>
      <title>Re: how to add dropdown field  to advanced view?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/how-to-add-dropdown-field-to-advanced-view/m-p/11621#M132</link>
      <description>&lt;P&gt;If you want two columns then you need to look at the attribute 'layoutPanel'&lt;/P&gt;

&lt;P&gt;e.g&lt;/P&gt;

&lt;P&gt;&lt;MODULE name="StaticContentSample" layoutpanel="panel_row1_col1"&gt;&lt;/MODULE&gt;&lt;/P&gt;

&lt;P&gt;then do for two columns you need another two with the following;&lt;/P&gt;

&lt;P&gt;layoutPanel="panel_row2_col1"&lt;BR /&gt;
layoutPanel="panel_row2_col1"&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 09:42:44 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/how-to-add-dropdown-field-to-advanced-view/m-p/11621#M132</guid>
      <dc:creator>Wushu</dc:creator>
      <dc:date>2020-09-28T09:42:44Z</dc:date>
    </item>
  </channel>
</rss>

