topic Re: Using 2 RADIOBUTTONS and using them in the query in Dashboards & Visualizations

Using 2 RADIOBUTTONS and using them in the query

abhinav_aashish — Wed, 19 May 2021 10:32:05 GMT

I'm having 3 indexes A(SUPER-SET), B(SUBSET-1), C(SUBSET-2).

I'm having 2 radio button groups: Group1 and Group2

Group1 has 2 options: YES and NO

When "YES" is selected then it performs A intersection B and "NO" does not perform any search.

Group2 has 2 options: YES and NO

When "YES" is selected then it performs A intersection C "NO" does not perform any search.

I'm having the following SOURCE CODE for it :

<input type="radio" token="field1" searchWhenChanged="true"> <label>Present in AB</label> <choice value="Yes">Yes</choice> <choice value="No">No</choice> <change> <condition value="Yes"> <set token="mysearch"> index=a ..................... | join <common_column> type=outer [| search index= B] | where check_column_value="BBBBBBBBBBB" | table <list of columns> </set> </condition> <condition value="No"> <set token="mysearch"></set> </condition> </change> </input> <input type="radio" token="field2" searchWhenChanged="true"> <label>Present in AC</label> <choice value="Yes">Yes</choice> <choice value="No">No</choice> <change> <condition value="Yes"> <set token="mysearch"> index=a ..................... | join <common_column> type=outer [| search index= C] | where check_column_value="CCCCCCCCCCCC" | table <list of columns> </set> </condition> <condition value="No"> <set token="mysearch"></set> </condition> </change> </input> <table> <search> <query>$mysearch$</query> </search> </table>

When i click on YES buttons for the two groups :

When I select both the YES options the result I get is from the index which is last selected as YES option only, i.e. in any case i'm not getting the result from both the sources even after selecting "YES" option.

I feel there is some issue with the token value in the last part of the code shared above.(Not sure!!)

Can anyone help me with this please?

Thanks

Re: Using 2 RADIOBUTTONS and using them in the query

ITWhisperer — Wed, 19 May 2021 10:47:08 GMT

You haven't defined what both set to yes means - Why not have one group with 3, or 4 or 5 values, A, A intersect B, A intersect C, A intersect (B intersect C), A intersect (B union C)? That way you can define your searches exactly as you would like for each case.

Re: Using 2 RADIOBUTTONS and using them in the query

abhinav_aashish — Wed, 19 May 2021 10:49:16 GMT

Sorry. I'm unable to get this.

Re: Using 2 RADIOBUTTONS and using them in the query

ITWhisperer — Wed, 19 May 2021 10:54:18 GMT

B is a subset of A, C is a different subset of A. Do these subsets overlap? When you select Yes from both radio button groups, do you want to search for those in A and (B or C), or those in A and (B and C). These are potentially two different things.

Re: Using 2 RADIOBUTTONS and using them in the query

abhinav_aashish — Wed, 19 May 2021 11:00:44 GMT

Yes these two subsets overlap.

I want to get the field values from index=A when YES is selected as per match condition.

Re: Using 2 RADIOBUTTONS and using them in the query

ITWhisperer — Wed, 19 May 2021 11:31:32 GMT

That still doesn't answer the question - what do you want when both yes boxes are selected? If the check column is different as returned by the joins

Join field	Field match from B	Field match from C	Keep B or C	Keep B and C
A			N	N
A	BBBBBBBBBBB		Y	N
A		CCCCCCCCCCCC	Y	N
A	BBBBBBBBBBB	CCCCCCCCCCCC	Y	Y

If these columns are the same (as possibly indicated in your example) then when both boxes are yes, your search might be something like

Re: Using 2 RADIOBUTTONS and using them in the query

abhinav_aashish — Thu, 20 May 2021 05:02:04 GMT

I want this in the output

BBBBBBBBBBB

CCCCCCCCCCCC

Re: Using 2 RADIOBUTTONS and using them in the query

ITWhisperer — Thu, 20 May 2021 06:24:59 GMT

You haven't understood the question. I was asking if you wanted "Keep B or C" or "Keep B and C". Nor have you clarified whether check_column_value is the same field in both B and C. Having said that, if you want to use the settings from both radio button groups, you could do something like this to set the mysearch token appropriately:

<input type="radio" token="radioB" searchWhenChanged="true"> <label>Present in AB</label> <choice value="Yes">Yes</choice> <choice value="No">No</choice> <change> <condition value="Yes"> <set token="joinB">| join common_column type=outer [| search index= B]</set> <set token="whereB">check_column_value="BBBBBBBBBBB"</set> <eval token="whereBC">if($whereC$="","| where ".$whereB$,"| where ".$whereB$." OR ".$whereC$)</eval> <set token="mysearch"> index=a ..................... $joinB$ $joinC$ $whereBC$ | table list of columns </set> </condition> <condition value="No"> <set token="joinB"></set> <set token="whereB"></set> <eval token="whereBC">if($whereC$="","","| where ".$whereC$)</eval> <set token="mysearch"> index=a ..................... $joinB$ $joinC$ $whereBC$ | table list of columns </set> </condition> </change> </input> <input type="radio" token="radioC" searchWhenChanged="true"> <label>Present in AC</label> <choice value="Yes">Yes</choice> <choice value="No">No</choice> <change> <condition value="Yes"> <set token="joinC">| join common_column type=outer [| search index= C]</set> <set token="whereC">check_column_value="CCCCCCCCCCCC"</set> <eval token="whereBC">if($whereB$="","| where ".$whereC$,"| where ".$whereB$." OR ".$whereC$)</eval> <set token="mysearch"> index=a ..................... $joinB$ $joinC$ $whereBC$ | table list of columns </set> </condition> <condition value="No"> <set token="joinC"></set> <set token="whereC"></set> <eval token="whereBC">if($whereB$="","","| where ".$whereB$)</eval> <set token="mysearch"> index=a ..................... $joinB$ $joinC$ $whereBC$ | table list of columns </set> </condition> </change> </input> <html> <pre>$mysearch$</pre> </html>

Re: Using 2 RADIOBUTTONS and using them in the query

abhinav_aashish — Thu, 20 May 2021 11:40:20 GMT

I implemented your code but when I select YES in bot the radio button groups I get the following error:

Error in 'where' command: The expression is malformed. An 'OR' term is missing.

Re: Using 2 RADIOBUTTONS and using them in the query

ITWhisperer — Thu, 20 May 2021 11:44:22 GMT

Can you share what you implemented?

Re: Using 2 RADIOBUTTONS and using them in the query

abhinav_aashish — Thu, 20 May 2021 11:46:25 GMT

I cant share those details. I implemented exactly the same as you wrote above.

Re: Using 2 RADIOBUTTONS and using them in the query

ITWhisperer — Thu, 20 May 2021 11:56:23 GMT

OK try setting a default for both radio button groups

Re: Using 2 RADIOBUTTONS and using them in the query

abhinav_aashish — Thu, 20 May 2021 12:24:21 GMT

Not working.

<default>Yes</default>

The combination on Yes(g1) and No(g2) and vice-versa works.

Also No(g1) and No(g2) works fine.

i want the result I clarified

Join field

Field match from B

Field match from C

Keep B or C

Keep B and C

CCCCCCCCCCCC

I'm sorry for too many edits.

Re: Using 2 RADIOBUTTONS and using them in the query

ITWhisperer — Thu, 20 May 2021 12:21:53 GMT

Please carefully check for any typos / mis-copies of code as this works for me - this is what is generated for me

Re: Using 2 RADIOBUTTONS and using them in the query

abhinav_aashish — Thu, 20 May 2021 12:33:04 GMT

My code works properly when done without the use of radio buttons and I've applied the same logic.

I'm facing the issue with the use of 2 radio button groups.

Also I wanted the result this way:

Join field

Field match from B

Field match from C

Keep B or C

Keep B and C

CCCCCCCCCCCC

Re: Using 2 RADIOBUTTONS and using them in the query

ITWhisperer — Thu, 20 May 2021 13:02:50 GMT

I suggest you temporarily add an html panel as I showed so you can see what they search expands to and see if you can spot what might be wrong with it. Or perhaps even copy it to the search and try and debug it there.

Re: Using 2 RADIOBUTTONS and using them in the query

abhinav_aashish — Fri, 21 May 2021 05:38:35 GMT

Thanks man it worked.

Instead of this

<set token="whereB">check_column_value="BBBBBBBBBBB"</set>

I was doing

<set token="whereB">| where check_column_value="BBBBBBBBBBB"</set>

This "| where" thing here was creating issues.

Thanks for the help.

Re: Using 2 RADIOBUTTONS and using them in the query

abhinav_aashish — Mon, 24 May 2021 08:17:44 GMT

There are some changes in the ask.

When I select "NO" from group-1 it should omit the rows from B index and similarly for group-2 it should omit the rows from C index when I select "NO".

And when "NO " is selected from both the groups it should return the rows from A which are not present in both B and C.

I tried few things by adding in the

<condition value="No"> <set token="joinB">| join common_column type=outer [| search index= B]</set> <set token="whereB">check_column_value !="BBBBBBBBBBB"</set> <eval token="whereBC">if($whereC$="","| where ".$whereB$,"| where ".$whereB$." OR ".$whereC$)</eval> <set token="mysearch"> index=a ..................... $joinB$ $joinC$ $whereBC$ | table list of columns </set> </condition>

for both the button groups but I wasn't getting satisfactory results.

Re: Using 2 RADIOBUTTONS and using them in the query

ITWhisperer — Mon, 24 May 2021 09:23:43 GMT

I think the OR should probably be AND for the No change handlers, i.e. check_column_value != "BBB" AND check_column_value = "CCC" if yes was chosen for C, or check_column_value != "BBB" AND check_column_value != "CCC" if no was chosen for C. Similarly for the C change handler.

Re: Using 2 RADIOBUTTONS and using them in the query

abhinav_aashish — Mon, 24 May 2021 09:43:36 GMT

Wont the above code return the fields from A as well when YES is selected?

The NO and NO works fine now but the YES-NO combinations does not give correct result.