All Apps and Add-ons

Populate Pulldown based on Lookup Field

gnovak
Builder

I have a lookup with a field "description". I would like a pulldown menu to populate with all of the values in the description field from my lookup file.

The menu populates if I use a search that DOESN'T use a lookup field so it is functional in that aspect. However I can't seem to get this to work and I've tried a few searches already. The Pulldown menu is just full of "No Values Found".

So far I tried:

| inputlookup WAT_Lookups.csv | fields description | dedup description

sourcetype=EPPWEB WAT | fields description | dedup description

Both of these searches, when done manually in search, show the description field and values in this field. Why they aren't populating the menu I'm not sure yet. Any ideas here?

Also the funny thing is, even though the pulldown menu will have "no values found" about 15 times, if I click on my search button on my form, everything works, all my graphs and tables load and the "description" field resolves and shows results. ? Just can't get it in the pulldown menu.

full code here

http://pastebin.com/0fYa7LcK

sideview
SplunkTrust
SplunkTrust

EDITED --

Formerly I advised trying

<param name="valueField">registry</param>

instead of

<param name="valueField">$name$</param>

but this was an erroneous answer. $name$ will work perfectly well in valueField, as a shortcut to the Pulldown's "name" param.

The questioner was able to later find and fix root cause on his own.

sideview
SplunkTrust
SplunkTrust

Actually. I took another look with slightly different eyes, and the Pulldown module absolutely DOES accept $name$ in valueField and labelField.... Sorry about the misleading answer but Im glad that you were able to resolve the problem.

0 Karma

gnovak
Builder

so it appears it might have been a simple error. no worries here..thanks for all your help. it's been great

0 Karma

gnovak
Builder

actually this worked:
description
Select Filename
$name$

0 Karma

gnovak
Builder

well it's for the filename not registry. let me try ...

0 Karma

Ayn
Legend

Include the relevant code for your view as well, please.

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...