All Apps and Add-ons

Populate Pulldown based on Lookup Field

gnovak
Builder

I have a lookup with a field "description". I would like a pulldown menu to populate with all of the values in the description field from my lookup file.

The menu populates if I use a search that DOESN'T use a lookup field so it is functional in that aspect. However I can't seem to get this to work and I've tried a few searches already. The Pulldown menu is just full of "No Values Found".

So far I tried:

| inputlookup WAT_Lookups.csv | fields description | dedup description

sourcetype=EPPWEB WAT | fields description | dedup description

Both of these searches, when done manually in search, show the description field and values in this field. Why they aren't populating the menu I'm not sure yet. Any ideas here?

Also the funny thing is, even though the pulldown menu will have "no values found" about 15 times, if I click on my search button on my form, everything works, all my graphs and tables load and the "description" field resolves and shows results. ? Just can't get it in the pulldown menu.

full code here

http://pastebin.com/0fYa7LcK

sideview
SplunkTrust
SplunkTrust

EDITED --

Formerly I advised trying

<param name="valueField">registry</param>

instead of

<param name="valueField">$name$</param>

but this was an erroneous answer. $name$ will work perfectly well in valueField, as a shortcut to the Pulldown's "name" param.

The questioner was able to later find and fix root cause on his own.

sideview
SplunkTrust
SplunkTrust

Actually. I took another look with slightly different eyes, and the Pulldown module absolutely DOES accept $name$ in valueField and labelField.... Sorry about the misleading answer but Im glad that you were able to resolve the problem.

0 Karma

gnovak
Builder

so it appears it might have been a simple error. no worries here..thanks for all your help. it's been great

0 Karma

gnovak
Builder

actually this worked:
description
Select Filename
$name$

0 Karma

gnovak
Builder

well it's for the filename not registry. let me try ...

0 Karma

Ayn
Legend

Include the relevant code for your view as well, please.

Get Updates on the Splunk Community!

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk &#43; Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...

Data Management Digest – January 2026

Welcome to the January 2026 edition of Data Management Digest! Welcome to the January 2026 edition of Data ...

Splunk SOAR Now Available on Google Cloud Platform

We’re excited to announce that Splunk SOAR is now natively available as a SaaS solution on Google Cloud ...