Splunk Search

populatingSearch not working -- Search works as standalone search

neiljpeterson
Communicator

Very simple search string which works fine in free search. Similar searches like this work fine for other fields. The fields do not populate. The search is definitely completing, I even tried to limit it to a shorter time with to no effect.

What am I missing here?

   <form>
      <label>Server Selector</label>
      <description>Displaying all active application servers with logged events going back 30 days</description>
      <!-- Do not need a Search Button. Inputs search when changed -->
      <fieldset autoRun="true" submitButton="false">
        <!-- Specify search when changed for the inputs -->
        <input type="radio" token="app_server" searchWhenChanged="true">
          <label>Select a Server:</label>
          <choice value="something">something</choice>
          <populatingSearch fieldForValue="app_server" fieldForLabel="app_server" earliest="-30d" latest="now">
            <![CDATA[host=* | stats dc(host) by host]]>
          </populatingSearch>
        </input>
      </fieldset>
    </form>
Tags (2)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

Your search yields two fields, host and dc(host). However, your radio input is looking for a field called app_server.

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

Your search yields two fields, host and dc(host). However, your radio input is looking for a field called app_server.

neiljpeterson
Communicator

Doh! Thank you. Works perfectly now!

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...