topic Re: could not create search - No Search query provided in Splunk Search

could not create search - No Search query provided

Jasmine — Mon, 08 Apr 2024 10:04:33 GMT

i am using below to load colur in drop downlist . Data loading propertly. but it always shows - Could not create search - No Search query provided

<input type="dropdown" token="color" depends="$color_dropdown_token$" searchWhenChanged="false"> <label>Color</label> <choice value="*">All</choice> <choice value="Green">Green</choice> <choice value="Orange">Orange</choice> <choice value="Red">Red</choice> <initialValue>*</initialValue> <search> <query/> <earliest>$Time.earliest$</earliest> <latest>$Time.latest$</latest> </search> </input>

Re: could not create search - No Search query provided

ITWhisperer — Mon, 08 Apr 2024 10:14:57 GMT

Try without the search

Re: could not create search - No Search query provided

Jasmine — Mon, 08 Apr 2024 14:26:03 GMT

i want to filter based on Timeframe. so i cant remove that

Re: could not create search - No Search query provided

ITWhisperer — Mon, 08 Apr 2024 15:03:53 GMT

The timeframe you showed (which I removed) applies to the search to dynamically populate the dropdown. Since you don't have a search to populate the dropdown (as shown by your error message), you don't need the timeframe here. You can still use the time in other parts of your dashboard.