All Apps and Add-ons

Populate Pulldown based on Lookup Field

gnovak
Builder

I have a lookup with a field "description". I would like a pulldown menu to populate with all of the values in the description field from my lookup file.

The menu populates if I use a search that DOESN'T use a lookup field so it is functional in that aspect. However I can't seem to get this to work and I've tried a few searches already. The Pulldown menu is just full of "No Values Found".

So far I tried:

| inputlookup WAT_Lookups.csv | fields description | dedup description

sourcetype=EPPWEB WAT | fields description | dedup description

Both of these searches, when done manually in search, show the description field and values in this field. Why they aren't populating the menu I'm not sure yet. Any ideas here?

Also the funny thing is, even though the pulldown menu will have "no values found" about 15 times, if I click on my search button on my form, everything works, all my graphs and tables load and the "description" field resolves and shows results. ? Just can't get it in the pulldown menu.

full code here

http://pastebin.com/0fYa7LcK

sideview
SplunkTrust
SplunkTrust

EDITED --

Formerly I advised trying

<param name="valueField">registry</param>

instead of

<param name="valueField">$name$</param>

but this was an erroneous answer. $name$ will work perfectly well in valueField, as a shortcut to the Pulldown's "name" param.

The questioner was able to later find and fix root cause on his own.

sideview
SplunkTrust
SplunkTrust

Actually. I took another look with slightly different eyes, and the Pulldown module absolutely DOES accept $name$ in valueField and labelField.... Sorry about the misleading answer but Im glad that you were able to resolve the problem.

0 Karma

gnovak
Builder

so it appears it might have been a simple error. no worries here..thanks for all your help. it's been great

0 Karma

gnovak
Builder

actually this worked:
description
Select Filename
$name$

0 Karma

gnovak
Builder

well it's for the filename not registry. let me try ...

0 Karma

Ayn
Legend

Include the relevant code for your view as well, please.

Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

  Ready to master Kubernetes and cloud monitoring like the pros?Join Splunk’s Growth Engineering team for an ...

Wrapping Up Cybersecurity Awareness Month

October might be wrapping up, but for Splunk Education, cybersecurity awareness never goes out of season. ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

&#x1f5e3; You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...