<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Populating search not working in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52684#M179664</link>
    <description>&lt;P&gt;Updated the initial post. I did try to change the name and try it but it doesn't work.&lt;/P&gt;</description>
    <pubDate>Tue, 04 Dec 2012 15:40:51 GMT</pubDate>
    <dc:creator>theouhuios</dc:creator>
    <dc:date>2012-12-04T15:40:51Z</dc:date>
    <item>
      <title>Populating search not working</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52678#M179658</link>
      <description>&lt;P&gt;Hello&lt;/P&gt;

&lt;P&gt;I am trying to autopopulate the below input type and its not giving any data in the dropbox. Can anyone please tell me where am I doing a mistake?&lt;/P&gt;

&lt;P&gt;&lt;INPUT type="dropdown" token="Area" /&gt;&lt;BR /&gt;
      &lt;LABEL&gt;Area: &lt;/LABEL&gt;&lt;BR /&gt;
      &lt;DEFAULT&gt;*&lt;/DEFAULT&gt;&lt;BR /&gt;
       &lt;POPULATINGSEARCH fieldforvalue="record.groupArea" fieldforlabel="record.groupArea"&gt; &amp;lt;![CDATA[earliest=-31d@d sourcetype="incident"|stats count by record.groupArea]]&amp;gt; &lt;/POPULATINGSEARCH&gt;&lt;/P&gt;

&lt;P&gt;&lt;IMG src="http://splunk-base.splunk.com//storage/Untitled_1.png" alt="alt text" /&gt;&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;?xml version='1.0' encoding='utf-8'?&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;&lt;/P&gt;&lt;FORM&gt;&lt;BR /&gt;
  &lt;LABEL&gt;Breakdown by Organizational Structure&lt;/LABEL&gt;&lt;BR /&gt;
  &lt;FIELDSET autorun="true"&gt;&lt;BR /&gt;
    &lt;INPUT type="dropdown" token="V" /&gt;&lt;BR /&gt;
      &lt;LABEL&gt;View: &lt;/LABEL&gt;&lt;BR /&gt;
      &lt;CHOICE value="over"&gt;Reactionary&lt;/CHOICE&gt;&lt;BR /&gt;
      &lt;CHOICE value="caut"&gt;Cautionary&lt;/CHOICE&gt;&lt;BR /&gt;
    &lt;P&gt;&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;input type="dropdown" token="Dept"&amp;gt;
  &amp;lt;label&amp;gt;Department: &amp;lt;/label&amp;gt;
  &amp;lt;default&amp;gt;*&amp;lt;/default&amp;gt;
  &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
  &amp;lt;choice value="Systems"&amp;gt;Systems&amp;lt;/choice&amp;gt;
  &amp;lt;choice value="Agency"&amp;gt;Agency&amp;lt;/choice&amp;gt;
&amp;lt;/input&amp;gt;
&amp;lt;input type="dropdown" token="Area"&amp;gt;
  &amp;lt;label&amp;gt;Area: &amp;lt;/label&amp;gt;
  &amp;lt;default&amp;gt;*&amp;lt;/default&amp;gt;
   &amp;lt;populatingSearch fieldforvalue="Area" fieldforlabel="Area"&amp;gt; &amp;lt;![CDATA[earliest=-31d@d sourcetype="incident"|rename record.groupArea as Area |stats count by Area]]&amp;gt; &amp;lt;/populatingSearch&amp;gt;
&amp;lt;/input&amp;gt;

&amp;lt;input type="text" token="WG"&amp;gt;
  &amp;lt;label&amp;gt;WorkGroup: &amp;lt;/label&amp;gt;
  &amp;lt;default&amp;gt;*&amp;lt;/default&amp;gt;
&amp;lt;/input&amp;gt;
&amp;lt;input type="text" token="CI"&amp;gt;
  &amp;lt;label&amp;gt;CI: &amp;lt;/label&amp;gt;
  &amp;lt;default&amp;gt;*&amp;lt;/default&amp;gt;
&amp;lt;/input&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;&lt;/P&gt;&lt;/FIELDSET&gt;&lt;BR /&gt;
  &lt;ROW&gt;&lt;P&gt;&lt;/P&gt;&lt;/ROW&gt;&lt;/FORM&gt;</description>
      <pubDate>Mon, 03 Dec 2012 20:32:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52678#M179658</guid>
      <dc:creator>theouhuios</dc:creator>
      <dc:date>2012-12-03T20:32:48Z</dc:date>
    </item>
    <item>
      <title>Re: Populating search not working</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52679#M179659</link>
      <description>&lt;P&gt;Should be upper case S in populatingSearch&lt;/P&gt;</description>
      <pubDate>Mon, 03 Dec 2012 21:41:11 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52679#M179659</guid>
      <dc:creator>rroberts</dc:creator>
      <dc:date>2012-12-03T21:41:11Z</dc:date>
    </item>
    <item>
      <title>Re: Populating search not working</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52680#M179660</link>
      <description>&lt;P&gt;That removes the error, but there is no data being populated in the dropdown. Updating the first post with the image of the data&lt;/P&gt;</description>
      <pubDate>Mon, 03 Dec 2012 22:03:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52680#M179660</guid>
      <dc:creator>theouhuios</dc:creator>
      <dc:date>2012-12-03T22:03:09Z</dc:date>
    </item>
    <item>
      <title>Re: Populating search not working</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52681#M179661</link>
      <description>&lt;P&gt;I think it might be a problem with the . in the field name.&lt;/P&gt;</description>
      <pubDate>Mon, 03 Dec 2012 22:46:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52681#M179661</guid>
      <dc:creator>rroberts</dc:creator>
      <dc:date>2012-12-03T22:46:06Z</dc:date>
    </item>
    <item>
      <title>Re: Populating search not working</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52682#M179662</link>
      <description>&lt;P&gt;Any help??&lt;/P&gt;</description>
      <pubDate>Tue, 04 Dec 2012 14:21:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52682#M179662</guid>
      <dc:creator>theouhuios</dc:creator>
      <dc:date>2012-12-04T14:21:51Z</dc:date>
    </item>
    <item>
      <title>Re: Populating search not working</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52683#M179663</link>
      <description>&lt;P&gt;Trying to recreate. Can you add the entire form XML please?&lt;/P&gt;</description>
      <pubDate>Tue, 04 Dec 2012 15:23:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52683#M179663</guid>
      <dc:creator>rroberts</dc:creator>
      <dc:date>2012-12-04T15:23:28Z</dc:date>
    </item>
    <item>
      <title>Re: Populating search not working</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52684#M179664</link>
      <description>&lt;P&gt;Updated the initial post. I did try to change the name and try it but it doesn't work.&lt;/P&gt;</description>
      <pubDate>Tue, 04 Dec 2012 15:40:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52684#M179664</guid>
      <dc:creator>theouhuios</dc:creator>
      <dc:date>2012-12-04T15:40:51Z</dc:date>
    </item>
    <item>
      <title>Re: Populating search not working</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52685#M179665</link>
      <description>&lt;P&gt;Check case sensitivity:&lt;/P&gt;

&lt;P&gt;fieldForValue=      fieldForLabel=&lt;/P&gt;</description>
      <pubDate>Tue, 04 Dec 2012 16:31:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52685#M179665</guid>
      <dc:creator>rroberts</dc:creator>
      <dc:date>2012-12-04T16:31:14Z</dc:date>
    </item>
    <item>
      <title>Re: Populating search not working</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52686#M179666</link>
      <description>&lt;P&gt;Did you have any luck?&lt;/P&gt;</description>
      <pubDate>Thu, 13 Dec 2012 01:03:27 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52686#M179666</guid>
      <dc:creator>rroberts</dc:creator>
      <dc:date>2012-12-13T01:03:27Z</dc:date>
    </item>
    <item>
      <title>Re: Populating search not working</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52687#M179667</link>
      <description>&lt;P&gt;also, autorun should be "autoRun" camel case. It took me awhile to realize that!&lt;/P&gt;</description>
      <pubDate>Wed, 01 May 2013 14:35:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Populating-search-not-working/m-p/52687#M179667</guid>
      <dc:creator>srowe</dc:creator>
      <dc:date>2013-05-01T14:35:16Z</dc:date>
    </item>
  </channel>
</rss>

