Dashboards & Visualizations

Can Multiselect Input have a dynamic default value?

shelbyladallen
Engager

I'd hope something like the following would work:

<input type="multiselect" searchWhenChanged="true" token="FY">
  <label>Fiscal Year</label>
  <search>
    <query>| savedsearch filter_fiscal_year</query>
   <condition match=" 1 == 1 ">
      <set token="foo">"2014"</set>
   </condition>
  </search>
  <default>$foo$</default>
  <fieldForLabel>FISCAL_YEAR</fieldForLabel>
  <fieldForValue>FISCAL_YEAR</fieldForValue>
  <prefix>(</prefix>
  <suffix>)</suffix>
</input>

Basically I'd like to populate $foo$ with the current fiscal year, while still allowing the user to select multiple fiscal years.
So far my errors suggest either that the token isn't being created properly OR that I can't use a token within the tag.

Thanks.

Tags (1)

Oti47
Path Finder

Same Problem,
I try to set the $foo$ token during a search at the same dashboard.

Option "Select first coice" doesn't work at multiselect.

URL link doesn't work for me.

Any other ideas?

Thanks

0 Karma

cb_usps
Explorer

I've tried using 'set token=' in each possible spot in the XML hierarchy and have come to the conclusion that it simply does not work, I have not witnessed a new token get created.
Also, tokens do not work in the 'default' field. As far as I can tell the reason is that the 'default' value becomes part of the URL for the form, and tokens are not parsed yet.
So, what I do to populate a default value is build it into the URL for the form. In your case it would be something like:
http://your_search_head_host:8000/en-US/app/your_app_name/your_form_name?form.FY=2014

and remove the $foo$ stuff.

0 Karma
Get Updates on the Splunk Community!

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...