topic Re: How can I set a dynamic default value in a dropdown (Simple XML) in Dashboards & Visualizations

How can I set a dynamic default value in a dropdown (Simple XML)

chris — Thu, 30 Jan 2014 16:35:37 GMT

Is it possible to configure the dropdown input to take the first row returned by the populating Search as its default?
If I configure the dropdown as follows it just has an empty field as its default.

<input type="dropdown" token="source" searchWhenChanged="true">
  <label>Select a Sourcetype:</label>
  <populatingSearch fieldForValue="sourcetype" fieldForLabel="sourcetype" earliest="-24h" latest="now">
    <![CDATA[index=_internal | stats count by sourcetype]]>
  </populatingSearch>
</input>

Thanks,
Chris

Re: How can I set a dynamic default value in a dropdown (Simple XML)

harshal_chakran — Fri, 31 Jan 2014 10:25:09 GMT

Hi Chris,
If you have got the solution can you please share it with me.Even I'm facing the same issue.

Re: How can I set a dynamic default value in a dropdown (Simple XML)

somesoni2 — Fri, 31 Jan 2014 17:22:33 GMT

+1, I already asked this a month back but not resolved yet. http://answers.splunk.com/answers/115727/splunk-6-simple-xml-dropdown-how-to-select-first-value-in-the-list

Re: How can I set a dynamic default value in a dropdown (Simple XML)

Lazarix — Thu, 15 May 2014 16:44:01 GMT

Try this on for size:

<param name="search">sourcetype=_internal earliest=-24h |fields host|dedup host
</param>
<param name="label">Select Name</param>
<param name="settingToCreate">host_setting</param>
<param name="searchFieldsToDisplay">
  <list>
    <param name="value">host</param>
    <param name="label">host</param>
  </list>
</param>

This should help you get what you want. You can get it to populate the dropdown based on "searchfieldsToDisplay"

Re: How can I set a dynamic default value in a dropdown (Simple XML)

nfilippi_splunk — Thu, 15 May 2014 22:00:43 GMT

As of Splunk 6.0.2, you can now use "selectFirstChoice" to populate the form input with the first returned value.

  <input type="dropdown" token="source" searchWhenChanged="true">
     <label>Select a Sourcetype:</label>
     <populatingSearch fieldForValue="sourcetype" fieldForLabel="sourcetype" earliest="-24h" latest="now">
        <![CDATA[index=_internal | stats count by sourcetype]]>
     </populatingSearch>
     <selectFirstChoice>true</selectFirstChoice>
  </input>

Re: How can I set a dynamic default value in a dropdown (Simple XML)

nfilippi_splunk — Thu, 15 May 2014 22:02:13 GMT

This is advanced xml

Re: How can I set a dynamic default value in a dropdown (Simple XML)

josefa — Fri, 12 Feb 2016 21:15:59 GMT

Also working in v6.2.3

 <input type="dropdown" token="field2" searchWhenChanged="true">
      <label>Web application</label>
      <search>
        <query>query</query>
        <earliest>$field1.earliest$</earliest>
          <latest>$field1.latest$</latest>
      </search>
      <fieldForLabel>WebApp</fieldForLabel>
      <fieldForValue>WebApp</fieldForValue>
      <selectFirstChoice>true</selectFirstChoice>
    </input>

Re: How can I set a dynamic default value in a dropdown (Simple XML)

helge — Tue, 28 Feb 2017 01:24:14 GMT

It took me a while to figure out that this does not work for multiselect inputs. Why?

Re: How can I set a dynamic default value in a dropdown (Simple XML)

nishantmishra21 — Fri, 21 Jul 2017 07:52:43 GMT

Any update how this has changed in version 6.5 ? I am getting 'not a valid' node as warning.

Re: How can I set a dynamic default value in a dropdown (Simple XML)

grittonc — Fri, 08 Mar 2019 19:46:23 GMT

Still working in v 7.0.8.

Re: How can I set a dynamic default value in a dropdown (Simple XML)

mclane1 — Tue, 04 Jan 2022 15:55:31 GMT

Thank you very much for this tip.

It doesn't work for me on 8.2.0 in type="multiselect" 😭