<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to get a populatingSearch to dynamically populate a drop-down menu? in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-get-a-populatingSearch-to-dynamically-populate-a-drop/m-p/207769#M13036</link>
    <description>&lt;P&gt;Awesome.  I only had to make one edit and it worked.  Added the index into the search&lt;BR /&gt;
    index=bro sourcetype=bro_dhcp earliest=-7d| fields + src_ip | dedup src_ip | sort by src_ip&lt;/P&gt;</description>
    <pubDate>Tue, 29 Sep 2020 09:57:00 GMT</pubDate>
    <dc:creator>cjrash1</dc:creator>
    <dc:date>2020-09-29T09:57:00Z</dc:date>
    <item>
      <title>How to get a populatingSearch to dynamically populate a drop-down menu?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-get-a-populatingSearch-to-dynamically-populate-a-drop/m-p/207767#M13034</link>
      <description>&lt;P&gt;All -&lt;/P&gt;

&lt;P&gt;I have been trying to implement the findings from a few other posts, but I just cannot get this figured out. I am trying to populate a drop-down based on active DHCP requests.  I can get the list of IPs with this search:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=bro sourcetype=bro_dhcp | sort by src_ip | dedup src_ip | table src_ip
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;BUT I cannot get it to implement in the drop-down menu.&lt;/P&gt;

&lt;P&gt;I have done massive amounts of deleting, and this is what I am left with:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;  &amp;lt;label&amp;gt;DNS Requests By IP&amp;lt;/label&amp;gt;  
  &amp;lt;fieldset submitButton="false" autoRun="false"&amp;gt;
    &amp;lt;input type="dropdown" token="inIP"&amp;gt;
    &amp;lt;label&amp;gt;Current DHCP Leases: &amp;lt;/label&amp;gt;
      &amp;lt;populatingSearch fieldForValue="src_ip" fieldForLabel="src_ip"&amp;gt;
        sourcetype=bro_dhcp | fields src_ip | dedup src_ip
      &amp;lt;/populatingSearch&amp;gt;
 &amp;lt;/input&amp;gt; 
  &amp;lt;/fieldset&amp;gt;
&amp;lt;/form&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Any help would be amazing.&lt;/P&gt;</description>
      <pubDate>Tue, 14 Jun 2016 02:23:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-get-a-populatingSearch-to-dynamically-populate-a-drop/m-p/207767#M13034</guid>
      <dc:creator>cjrash1</dc:creator>
      <dc:date>2016-06-14T02:23:36Z</dc:date>
    </item>
    <item>
      <title>Re: How to get a populatingSearch to dynamically populate a drop-down menu?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-get-a-populatingSearch-to-dynamically-populate-a-drop/m-p/207768#M13035</link>
      <description>&lt;P&gt;Try this&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;label&amp;gt;DNS Requests By IP&amp;lt;/label&amp;gt;
&amp;lt;fieldset submitButton="false" autoRun="false"&amp;gt;
    &amp;lt;input type="dropdown" token="inIP"&amp;gt;
        &amp;lt;label&amp;gt;Current DHCP Leases: &amp;lt;/label&amp;gt;
        &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;
           sourcetype=bro_dhcp | fields src_ip | dedup src_ip
        &amp;lt;/query&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;fieldForLabel&amp;gt;src_ip&amp;lt;/fieldForLabel&amp;gt;
        &amp;lt;fieldForValue&amp;gt;src_ip&amp;lt;/fieldForValue&amp;gt;
    &amp;lt;/input&amp;gt;
&amp;lt;/fieldset&amp;gt;
&amp;lt;/form&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 14 Jun 2016 04:06:49 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-get-a-populatingSearch-to-dynamically-populate-a-drop/m-p/207768#M13035</guid>
      <dc:creator>sundareshr</dc:creator>
      <dc:date>2016-06-14T04:06:49Z</dc:date>
    </item>
    <item>
      <title>Re: How to get a populatingSearch to dynamically populate a drop-down menu?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-get-a-populatingSearch-to-dynamically-populate-a-drop/m-p/207769#M13036</link>
      <description>&lt;P&gt;Awesome.  I only had to make one edit and it worked.  Added the index into the search&lt;BR /&gt;
    index=bro sourcetype=bro_dhcp earliest=-7d| fields + src_ip | dedup src_ip | sort by src_ip&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 09:57:00 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-get-a-populatingSearch-to-dynamically-populate-a-drop/m-p/207769#M13036</guid>
      <dc:creator>cjrash1</dc:creator>
      <dc:date>2020-09-29T09:57:00Z</dc:date>
    </item>
  </channel>
</rss>

