topic Re: display the dropdown content as Chart title in Splunk Search

display the dropdown content as Chart title

harshal_chakran — Tue, 04 Feb 2014 11:26:45 GMT

Hi,

I am using a xml code for showing a dropdown as follows:-

I want to display the content of dropdown, i.e.DataCall or Datarecieve as the title of the chart. And it should change as per the selection of dropdown.

Sorry I was not able to put the code directly, so I am attaching an image of it.

Please Help

Re: display the dropdown content as Chart title

somesoni2 — Tue, 04 Feb 2014 14:10:32 GMT

Just used $dropdowntokenname$ in place of title text. Example:

<form>
  <label>DynamicChartTitle</label>
  <description/>
  <fieldset autoRun="true" submitButton="true">
    <input type="time" searchWhenChanged="true">
      <default>
        <earliestTime>-15m</earliestTime>
        <latestTime>now</latestTime>
      </default>
    </input>
    <input type="dropdown" token="sourcetype" id="field3">
      <label>sourcetype :</label>
      <default>*</default>
      <choice value="*">All</choice>
      <populatingSearch fieldForValue="sourcetype" fieldForLabel="sourcetype">
        <![CDATA[ index=_internal | stats count by sourcetype | fields sourcetype]]>
      </populatingSearch>
    </input>
  </fieldset>
  <row>
    <chart>
      <title>DefaultTitle- $sourcetype$</title>
      <searchString>index=_internal | stats count by sourcetype</searchString>
      <earliestTime>$earliest$</earliestTime>
      <latestTime>$latest$</latestTime>
    </chart>
  </row>
</form>

Re: display the dropdown content as Chart title

harshal_chakran — Wed, 05 Feb 2014 12:17:27 GMT

Hi,
Thanks for the reply somesoni2.
I have already define one token, as shown above i.e."user1", which I am using in a searchstring. Is it possible to define another token for the choice content?

Re: display the dropdown content as Chart title

somesoni2 — Wed, 05 Feb 2014 15:58:12 GMT

You can use your token user1 everywhere, you don't have to define another token for same value. Hope this is what you are asking here.