topic Re: Why does |stats values(x) not work as a dynamic input in a panel on my dashboard? in Dashboards & Visualizations

Why does |stats values(x) not work as a dynamic input in a panel on my dashboard?

krwinters11 — Thu, 13 Nov 2014 21:22:56 GMT

I am trying to use | stats values(x) as my search string to populate a dynamic input to be used on a panel on my dashboard. It fails to populate, but the search is working fine in the search app. Is there another alternative? I want to get distinct values in a field so my user can change the search for each of the distinct values.

Re: Why does |stats values(x) not work as a dynamic input in a panel on my dashboard?

martin_mueller — Thu, 13 Nov 2014 23:11:55 GMT

Your search produces one result with a multi-value field, the input is looking for one result per value. Try one of these:

base search | top 0 x

base search | stats count by x

The first will sort by count per x, the second by value of x.

Re: Why does |stats values(x) not work as a dynamic input in a panel on my dashboard?

krwinters11 — Thu, 13 Nov 2014 23:31:38 GMT

They both work in the search app, but when I use them to dynamically fill my drop down input, I only get one result when I should have 5 or so. Any Ideas?

Re: Why does |stats values(x) not work as a dynamic input in a panel on my dashboard?

martin_mueller — Fri, 14 Nov 2014 10:53:32 GMT

Do post the XML fragment defining your input. Without that we're guessing blindly.

Re: Why does |stats values(x) not work as a dynamic input in a panel on my dashboard?

krwinters11 — Fri, 14 Nov 2014 14:39:54 GMT

  <input type="dropdown" token="u" searchWhenChanged="true">
    <label>Select Unit</label>
    <populatingSearch fieldForLabel="Unit" fieldForValue="Unit2">index=mini sourcetype=tail_mini | stats count by Unit</populatingSearch>
    <prefix>Unit:</prefix>
  </input>
  <chart>
    <title>Average Concentration by Unit</title>
    <searchString>index=mini sourcetype=tail_minicam Unit=$u$  | timechart span=1h avg(Concentration) by Unit</searchString>
    <earliestTime>$field2.earliest$</earliestTime>
    <latestTime>$field2.latest$</latestTime>
    <option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
    <option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option>
    <option name="charting.axisTitleX.visibility">visible</option>
    <option name="charting.axisTitleY.visibility">visible</option>
    <option name="charting.axisTitleY2.visibility">visible</option>
    <option name="charting.axisX.scale">linear</option>
    <option name="charting.axisY.scale">linear</option>
    <option name="charting.axisY2.enabled">false</option>
    <option name="charting.axisY2.scale">inherit</option>
    <option name="charting.chart">column</option>
    <option name="charting.chart.nullValueMode">gaps</option>
    <option name="charting.chart.sliceCollapsingThreshold">0.01</option>
    <option name="charting.chart.stackMode">default</option>
    <option name="charting.chart.style">shiny</option>
    <option name="charting.drilldown">all</option>
    <option name="charting.layout.splitSeries">0</option>
    <option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
    <option name="charting.legend.placement">right</option>
  </chart>
</panel>

Re: Why does |stats values(x) not work as a dynamic input in a panel on my dashboard?

martin_mueller — Fri, 14 Nov 2014 14:41:32 GMT

You're using Unit2 for value, but there is no field by that name?

Re: Why does |stats values(x) not work as a dynamic input in a panel on my dashboard?

krwinters11 — Fri, 14 Nov 2014 14:45:44 GMT

That was it! So silly. Thank you for your help!