topic Re: Using more than one dropdown menu for the same search in Reporting

Using more than one dropdown menu for the same search

marinalalves — Tue, 04 Aug 2020 14:47:01 GMT

Hello,

I'm trying to configure two different dropdown menus - the idea is to give option to the user, either he picks a value from the first dropdown (all videos - $dropdown_token$) OR he picks one of the top 10 ($field1$).

The problem is I don't seem to know how to insert this information on my visuals - the dashboard keeps running only if I select the first option/dropdown menu.

I tried different ways of writing the query, such as:

<panel>
<single>
<title>Unique Viewers</title>
<search>
<query>index=index Operation="views"
| search ResourceTitle="$dropdown_token$","$field1$"
|stats distinct_count(UserId)</query>
<earliest>$picktime_token.earliest$</earliest>
<latest>$picktime_token.latest$</latest>
<sampleRatio>1</sampleRatio>
</search>

I also tried | search ResourceTitle="$dropdown_token$" OR "$field1$"

I know it's a beginners question but I appreciate if you could help me.

THanks

Re: Using more than one dropdown menu for the same search

thambisetty — Tue, 04 Aug 2020 14:59:17 GMT

ResourceTitle="$dropdown_token$" OR ResourceTitle="$field1$"

Re: Using more than one dropdown menu for the same search

marinalalves — Wed, 05 Aug 2020 08:44:51 GMT

I tried but it doesn't work - visuals keep waiting for the query to run.

Re: Using more than one dropdown menu for the same search

to4kawa — Wed, 05 Aug 2020 09:09:04 GMT

sample:

<form> <label>double dropdown</label> <fieldset submitButton="false"> <input type="dropdown" token="dropdown_token"> <label>dropdown1</label> <fieldForLabel>label</fieldForLabel> <fieldForValue>sourcetype</fieldForValue> <search> <query>| tstats count where index=_internal by sourcetype | table sourcetype | eval label=sourcetype</query> <earliest>-24h@h</earliest> <latest>now</latest> </search> </input> <input type="dropdown" token="field1"> <label>dropdown2</label> <fieldForLabel>label</fieldForLabel> <fieldForValue>sourcetype</fieldForValue> <search> <query>| tstats count where index=_internal by sourcetype | table sourcetype | eval label=sourcetype</query> <earliest>-24h@h</earliest> <latest>now</latest> </search> </input> <input type="time" token="field3"> <label></label> <default> <earliest>-24h@h</earliest> <latest>now</latest> </default> </input> </fieldset> <row> <panel> <event> <search> <query>index=_internal sourcetype=$dropdown_token$ OR sourcetype=$field1$ | head 100</query> <earliest>0</earliest> <latest></latest> <sampleRatio>1</sampleRatio> </search> <option name="count">20</option> <option name="type">list</option> </event> </panel> </row> </form>

your simpleXML is something wrong.