<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Form and inputlookup in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Form-and-inputlookup/m-p/38669#M1792</link>
    <description>&lt;P&gt;What is the problem with the following form?  The form utilizes inputlookup to generate a dropdown.  The dropdown list works.  However the query portion is not working out.  Where is this problem?  Thanks in advance.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;    &amp;lt;form class="formsearch"&amp;gt;
&amp;lt;label&amp;gt;Top H&amp;lt;/label&amp;gt;
&amp;lt;!--
&amp;lt;searchTemplate&amp;gt;index=myapp supportGroup="$VGroup$" | top 15 tgtHostname&amp;lt;/searchTemplate&amp;gt; 
&amp;lt;searchTemplate&amp;gt;index=myapp supportGroup="$VGroup$"&amp;lt;/searchTemplate&amp;gt;
&amp;lt;searchTemplate&amp;gt;index=myapp supportGroup="$VGroup$" | top 15 "$VGroup$"&amp;lt;/searchTemplate&amp;gt;
&amp;lt;searchTemplate&amp;gt;index=myapp supportGroup=$VGroup$ | top 15 $VGroup$&amp;lt;/searchTemplate&amp;gt;
&amp;lt;searchTemplate&amp;gt;index=myapp supportGroup=$VGroup$ | top 15 supportGroup&amp;lt;/searchTemplate&amp;gt;
--&amp;gt;

&amp;lt;searchTemplate&amp;gt;index= myapp supportGroup=$VGroup$&amp;lt;/searchTemplate&amp;gt;

&amp;lt;fieldset&amp;gt;
   &amp;lt;input type="dropdown" token="supportGroup"&amp;gt;
   &amp;lt;label&amp;gt;Select Support Group&amp;lt;/label&amp;gt;
   &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
   &amp;lt;populatingSearch fieldForValue="VGroup" fieldForLabel="VGroup"&amp;gt;&amp;lt;![CDATA[|inputlookup supportgroup.csv | fields + VGroup]]&amp;gt;&amp;lt;/popula
tingSearch&amp;gt;
  &amp;lt;/input&amp;gt;

    &amp;lt;input type="time"&amp;gt;
        &amp;lt;default&amp;gt;Last 7 days&amp;lt;/default&amp;gt;
    &amp;lt;/input&amp;gt;
&amp;lt;/fieldset&amp;gt;

  &amp;lt;row&amp;gt;
    &amp;lt;chart&amp;gt;
      &amp;lt;title&amp;gt;Top Hosts&amp;lt;/title&amp;gt;
      &amp;lt;option name="charting.chart"&amp;gt;pie&amp;lt;/option&amp;gt;
      &amp;lt;option name="drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
    &amp;lt;/chart&amp;gt;
    &amp;lt;chart&amp;gt;
      &amp;lt;title&amp;gt;Top Hosts&amp;lt;/title&amp;gt;
      &amp;lt;option name="drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
    &amp;lt;/chart&amp;gt;
  &amp;lt;/row&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;table&amp;gt;
      &amp;lt;title&amp;gt;Top Hosts&amp;lt;/title&amp;gt;
      &amp;lt;option name="drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
    &amp;lt;/table&amp;gt;
  &amp;lt;/row&amp;gt;


&amp;lt;/form&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Wed, 21 Dec 2011 21:55:04 GMT</pubDate>
    <dc:creator>DTERM</dc:creator>
    <dc:date>2011-12-21T21:55:04Z</dc:date>
    <item>
      <title>Form and inputlookup</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Form-and-inputlookup/m-p/38669#M1792</link>
      <description>&lt;P&gt;What is the problem with the following form?  The form utilizes inputlookup to generate a dropdown.  The dropdown list works.  However the query portion is not working out.  Where is this problem?  Thanks in advance.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;    &amp;lt;form class="formsearch"&amp;gt;
&amp;lt;label&amp;gt;Top H&amp;lt;/label&amp;gt;
&amp;lt;!--
&amp;lt;searchTemplate&amp;gt;index=myapp supportGroup="$VGroup$" | top 15 tgtHostname&amp;lt;/searchTemplate&amp;gt; 
&amp;lt;searchTemplate&amp;gt;index=myapp supportGroup="$VGroup$"&amp;lt;/searchTemplate&amp;gt;
&amp;lt;searchTemplate&amp;gt;index=myapp supportGroup="$VGroup$" | top 15 "$VGroup$"&amp;lt;/searchTemplate&amp;gt;
&amp;lt;searchTemplate&amp;gt;index=myapp supportGroup=$VGroup$ | top 15 $VGroup$&amp;lt;/searchTemplate&amp;gt;
&amp;lt;searchTemplate&amp;gt;index=myapp supportGroup=$VGroup$ | top 15 supportGroup&amp;lt;/searchTemplate&amp;gt;
--&amp;gt;

&amp;lt;searchTemplate&amp;gt;index= myapp supportGroup=$VGroup$&amp;lt;/searchTemplate&amp;gt;

&amp;lt;fieldset&amp;gt;
   &amp;lt;input type="dropdown" token="supportGroup"&amp;gt;
   &amp;lt;label&amp;gt;Select Support Group&amp;lt;/label&amp;gt;
   &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
   &amp;lt;populatingSearch fieldForValue="VGroup" fieldForLabel="VGroup"&amp;gt;&amp;lt;![CDATA[|inputlookup supportgroup.csv | fields + VGroup]]&amp;gt;&amp;lt;/popula
tingSearch&amp;gt;
  &amp;lt;/input&amp;gt;

    &amp;lt;input type="time"&amp;gt;
        &amp;lt;default&amp;gt;Last 7 days&amp;lt;/default&amp;gt;
    &amp;lt;/input&amp;gt;
&amp;lt;/fieldset&amp;gt;

  &amp;lt;row&amp;gt;
    &amp;lt;chart&amp;gt;
      &amp;lt;title&amp;gt;Top Hosts&amp;lt;/title&amp;gt;
      &amp;lt;option name="charting.chart"&amp;gt;pie&amp;lt;/option&amp;gt;
      &amp;lt;option name="drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
    &amp;lt;/chart&amp;gt;
    &amp;lt;chart&amp;gt;
      &amp;lt;title&amp;gt;Top Hosts&amp;lt;/title&amp;gt;
      &amp;lt;option name="drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
    &amp;lt;/chart&amp;gt;
  &amp;lt;/row&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;table&amp;gt;
      &amp;lt;title&amp;gt;Top Hosts&amp;lt;/title&amp;gt;
      &amp;lt;option name="drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
    &amp;lt;/table&amp;gt;
  &amp;lt;/row&amp;gt;


&amp;lt;/form&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Wed, 21 Dec 2011 21:55:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Form-and-inputlookup/m-p/38669#M1792</guid>
      <dc:creator>DTERM</dc:creator>
      <dc:date>2011-12-21T21:55:04Z</dc:date>
    </item>
    <item>
      <title>Re: Form and inputlookup</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Form-and-inputlookup/m-p/38670#M1793</link>
      <description>&lt;P&gt;I think it should be&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;searchtemplate&amp;gt;index= myapp supportGroup="$supportGroup$"&amp;lt;/searchtemplate&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;I put quotes around variables as a best practice.  They aren't required.&lt;/P&gt;</description>
      <pubDate>Wed, 21 Dec 2011 22:16:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Form-and-inputlookup/m-p/38670#M1793</guid>
      <dc:creator>lguinn2</dc:creator>
      <dc:date>2011-12-21T22:16:39Z</dc:date>
    </item>
    <item>
      <title>Re: Form and inputlookup</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Form-and-inputlookup/m-p/38671#M1794</link>
      <description>&lt;P&gt;The search comes up empty.  It did not work.  Any other ideas?&lt;/P&gt;</description>
      <pubDate>Thu, 22 Dec 2011 19:41:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Form-and-inputlookup/m-p/38671#M1794</guid>
      <dc:creator>DTERM</dc:creator>
      <dc:date>2011-12-22T19:41:36Z</dc:date>
    </item>
    <item>
      <title>Re: Form and inputlookup</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Form-and-inputlookup/m-p/38672#M1795</link>
      <description>&lt;P&gt;What do you get if you type&lt;/P&gt;

&lt;P&gt;index=myapp supportGroup=XXX&lt;/P&gt;

&lt;P&gt;in the search box, where XXX is the name of a valid support group?&lt;/P&gt;</description>
      <pubDate>Thu, 22 Dec 2011 20:51:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Form-and-inputlookup/m-p/38672#M1795</guid>
      <dc:creator>lguinn2</dc:creator>
      <dc:date>2011-12-22T20:51:28Z</dc:date>
    </item>
    <item>
      <title>Re: Form and inputlookup</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Form-and-inputlookup/m-p/38673#M1796</link>
      <description>&lt;P&gt;Your suggestion works.&lt;/P&gt;

&lt;P&gt;This is the condensed script. Any idea why this does not work?  The drop down works, however the query is blank.&lt;/P&gt;

&lt;P&gt;&lt;SEARCHTEMPLATE&gt;index=MyApp supportGroup=$VGroup$&lt;/SEARCHTEMPLATE&gt;&lt;/P&gt;

&lt;FIELDSET&gt;
   &lt;INPUT type="dropdown" token="supportGroup" /&gt;
   &lt;LABEL&gt;Select Support Group&lt;/LABEL&gt;
   &lt;CHOICE value="*"&gt;All&lt;/CHOICE&gt;
   &lt;POPULATINGSEARCH fieldforvalue="VGroup" fieldforlabel="VGroup"&gt;|inputlookup supportgroup.csv | fields + VGroup&lt;/POPULATINGSEARCH&gt;
  

    &lt;INPUT type="time" /&gt;
        &lt;DEFAULT&gt;Last 7 days&lt;/DEFAULT&gt;
    
&lt;/FIELDSET&gt;</description>
      <pubDate>Thu, 05 Jan 2012 17:07:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Form-and-inputlookup/m-p/38673#M1796</guid>
      <dc:creator>DTERM</dc:creator>
      <dc:date>2012-01-05T17:07:17Z</dc:date>
    </item>
    <item>
      <title>Re: Form and inputlookup</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Form-and-inputlookup/m-p/38674#M1797</link>
      <description>&lt;P&gt;Thanks. It finally worked.&lt;/P&gt;</description>
      <pubDate>Thu, 05 Jan 2012 18:31:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Form-and-inputlookup/m-p/38674#M1797</guid>
      <dc:creator>DTERM</dc:creator>
      <dc:date>2012-01-05T18:31:05Z</dc:date>
    </item>
    <item>
      <title>Re: Form and inputlookup</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Form-and-inputlookup/m-p/38675#M1798</link>
      <description>&lt;P&gt;Couple of things:&lt;BR /&gt;&lt;BR /&gt;
1. Element and Attributes are case sensitive should be fieldForValue and fieldForLabel and check the elements searchTemplate and populatingSearch.&lt;BR /&gt;&lt;BR /&gt;
2. Your token is VGroup in your searchTemplate. Should match your token attribute value in your input element ie token="VGroup"&lt;BR /&gt;&lt;BR /&gt;
3. fieldForValue and fieldForLabel should be "supportGroup"&lt;/P&gt;</description>
      <pubDate>Thu, 05 Jan 2012 18:37:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Form-and-inputlookup/m-p/38675#M1798</guid>
      <dc:creator>rroberts</dc:creator>
      <dc:date>2012-01-05T18:37:57Z</dc:date>
    </item>
  </channel>
</rss>

