topic Re: Radio button and dropdown with populatedSearch in Dashboards & Visualizations

Radio button and dropdown with populatedSearch

ddarmand — Fri, 15 Mar 2013 07:54:07 GMT

Hello everyone,

I wants to create a dropdown that will list all of my hosts based on a source selected by a radio button.

How can i do that ?

Here is my code, actually not working :

Test

<searchTemplate>index=main  host=$hote$ source=$rzosrc$</searchTemplate>

<fieldset autorun="on">
    <input type="radio" token="rzosrc">
        <label>Choix du reseau</label>
        <choice value="RMS">RMS</choice>
        <choice value="RTH">RTH</choice>
        <choice value="SPP">SPP</choice>
    </input>

    <input type="dropdown" token="hote">
        <label>Choix host</label>  
        <populatingSearch fieldForValue="host" fieldForLabel="host" earliest="-2d" latest="now">| metadata source=$rzosrc$ type="hosts" index="main"
        </populatingSearch>
     </input>

</fieldset>

<row>
    <event>
        <title>Results</title>
        <option name="count">50</option>
    </event>
</row>

Thanks you

Re: Radio button and dropdown with populatedSearch

ddarmand — Mon, 18 Mar 2013 07:24:18 GMT

Nobody ? please !

Re: Radio button and dropdown with populatedSearch

stefano_guidoba — Mon, 18 Mar 2013 10:41:16 GMT

Hi,

My Code

here is my Advanced XML to create a Dropdown list populated with a search. My suggestion is to put another pulldown around it to let you select your source and use that parameter in the subsequent search that will finally populate the second dropdown.

Regards,
Stefano

Re: Radio button and dropdown with populatedSearch

ddarmand — Tue, 19 Mar 2013 09:36:00 GMT

Thanks but when i try to test this code, i code the error message "layoutPanel is not define for module pulldown" and for module search ect... what should i do ?

Re: Radio button and dropdown with populatedSearch

stefano_guidoba — Tue, 31 Dec 2013 08:22:19 GMT

have you installed sideview utils app?

Re: Radio button and dropdown with populatedSearch

nfilippi_splunk — Tue, 31 Dec 2013 17:33:54 GMT

In Splunk 6, this is now possible using Simple XML as part of the re-design to enable the use of tokens anywhere in the page.

There is an example of this "Cascading Form Input" within the "Splunk 6 Dashboard Examples" App (http://apps.splunk.com/app/1603/).

Here is the example XML:

<form>
  <label>Cascading Form Input Element</label>
  <description>A form input element's selected value is used to populate another form input element's options.</description>
  <fieldset autoRun="true">
    <input type="dropdown" token="username">
      <default>*</default>
      <choice value="*">All</choice>
      <populatingSearch fieldForValue="user" fieldForLabel="user" earliest="-24h" latest="now">
        <![CDATA[index=_internal | stats count by user]]>
      </populatingSearch>
    </input>
    <input type="radio" token="source">
      <default>*</default>
      <choice value="*">All</choice>
      <populatingSearch fieldForValue="sourcetype" fieldForLabel="sourcetype" earliest="-24h" latest="now">
        <![CDATA[index=_internal user=$username$| stats count by sourcetype]]>
      </populatingSearch>
    </input>
  </fieldset>
  <row>
    <table>
      <title>Table of events</title>
      <searchString>index=_internal user=$username$ sourcetype=$source$ | head 1000 | table _time, user, sourcetype, _raw</searchString>
      <earliestTime>-24h@h</earliestTime>
      <latestTime>now</latestTime>
    </table>
  </row>
</form>