All Apps and Add-ons

What is the purpose of fieldforLabel attribute?

rroberts
Splunk Employee
Splunk Employee

Ive changed the value for fieldforLabel attribute on the populatingSearch element to something arbitrary and it seems to make no difference. What does this attribute actually do? It is listed as mandatory in the XML reference docs.

0 Karma

somesoni2
Revered Legend

If you are configuring an input like dropdown/checkbox, the fieldforValue defines which field value from the pupulatingSearch result will be used as token value and the fieldforLabel define which field value from the popultingSearch result will be used to display in the UI. E.g. showing label "All" in dropdown and using "*" as token value.
I tested with Splunk 5.0.5 and it doesn't work if the fieldforLabel column is not present in the result. What Splunk version you're using?

strive
Influencer

It is used to display Label names. Say for example Names in a dropdown.

  <fieldset>
      <input type="dropdown" token="host" searchWhenChanged="true">
          <label>Host:</label>
          <default>SomeValue</default>
          <populatingSearch fieldForValue="host" fieldForLabel="host">| metadata type=hosts                                        index=os</populatingSearch>
          <choice value="*">all</choice>
       </input>
0 Karma

strive
Influencer

The fieldForLabel and fieldForValue should be in resultset of your search.
Hope this will help you http://answers.splunk.com/answers/151189/how-can-i-get-the-current-time-in-hhmmss-as-the-default-val...

0 Karma

rroberts
Splunk Employee
Splunk Employee

I tried something similar but saw no difference.

0 Karma
Get Updates on the Splunk Community!

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...

From Alert to Resolution: How Splunk Observability Helps SREs Navigate Critical ...

It's 3:17 AM, and your phone buzzes with an urgent alert. Wire transfer processing times have spiked, and ...