topic Re: two searchTemplate in one form in Dashboards & Visualizations

two searchTemplate in one form

abhayneilam — Sat, 22 Dec 2012 19:07:16 GMT

Hi,

How Can I run two searchTemplate in a single form

I have a query which gets two variable : $first$ and $second$

Now $first$ is always ABC

but $second$ varies according to the country:

For INDIA: it has 5 values
For AUS : it has 5 values

So, I am clicking ABC and any of the one value of AUS then it is not working, because INDIA has been declared before AUS in the form..

it is not taking values for both INDIA and AUS

Please help

Re: two searchTemplate in one form

abhayneilam — Sat, 22 Dec 2012 22:21:33 GMT

Can I expect some prompt answer to my problem ..
Your help would be highly appreciated

Re: two searchTemplate in one form

Ayn — Sat, 22 Dec 2012 22:31:38 GMT

It's saturday, I wouldn't expect many people to be around (in fact, I'm not really sure what I'm doing here either). Patience is a virtue.

Re: two searchTemplate in one form

hartfoml — Fri, 03 Apr 2015 14:37:49 GMT

Thanks @Ayn for standing up for the weekend but it is 2 years plus and I have this same question

I would like to use two form searches on the same dashboard. I tried puting them in seperet row's but that didn't work

I would like to have one form search at the top of the dashboard and another form search at the bottom with different form windows for each of the two 's

Can anyone help me and @abhayneilam with this problem?

If you can please post as an answer so @abhayneilam can review and select as an answer

Re: two searchTemplate in one form

sbochniewicz — Fri, 03 Apr 2015 17:31:31 GMT

Here is a sample based on one of my dashboard forms. I hope this helps. Basically you just use the value of the input token as a variable in the second populating search.

<fieldset submitButton="true">
    <input type="dropdown" token="rmonth1">
      <label>Recent Report Month</label>
      <populatingSearch fieldForValue="report_month" fieldForLabel="report_month">
        <![CDATA[| savedsearch "AWS Bill - Monthly Latest Snapshot" | stats count by report_month]]>
      </populatingSearch>
    </input>
    <input type="dropdown" token="rmonth2">
      <label>Previous Comparison Report Month</label>
      <populatingSearch fieldForValue="report_month" fieldForLabel="report_month">
        <![CDATA[| savedsearch "AWS Bill - Monthly Latest Snapshot" | where report_month<"$rmonth1$" | stats count by report_month]]>
      </populatingSearch>
    </input>
  </fieldset>

Re: two searchTemplate in one form

sbochniewicz — Fri, 03 Apr 2015 17:42:32 GMT

@hartfomi I hope this answers your question
http://answers.splunk.com/answers/130801/put-multiple-forms-on-a-single-dashboard.html