Dashboards & Visualizations

Dashboard Error: Pulldown is configured statically but with only a single static option

abhayneilam
Contributor

I have a dashboard, when loaded ,it shows "Error-Pulldown is configured statically but with only a single static option.

my view is as follows :

<view onunloadCancelJobs="true" template="dashboard.html">
  <label>XXXXX</label>

  <module name="SideviewUtils" layoutPanel="appHeader"/>
  <!--module name="AppBar" layoutPanel="appHeader"/ -->


<module name="Pulldown" layoutPanel="panel_row1_col1" autoRun="True">
    <param name="staticOptions">
        <list>
            <param name="value">LastThreeHours,-6h@h,-3h@h</param>
            <param name="label">Last Three Hours</param>
        </list>
        <list>
            <param name="value">Today,-0day@day,-3h@h</param>
            <param name="label">Today</param>
        </list>
        <list>
            <param name="value">Yesterday,-1day@day,-0day@day</param>
            <param name="label">Yesterday</param>
        </list>
        <list>
            <param name="value">Last Two Days,-2day@day,-0day@day</param>
            <param name="label">Last Two Days</param>
        </list>
        <list>
            <param name="value">Last Three Days,-3day@day,-0day@day</param>
            <param name="label">Last Three Days</param>
        </list>
        <list>
            <param name="value">Current week,-0week@week+1day,-3h@h</param>
            <param name="label">Current week</param>
        </list>
        <list>
            <param name="value">Last week,-1week@week+1day,-0week@week+1day</param>
            <param name="label">Last week</param>
        </list>
        <list>
            <param name="value">Last Two weeks,-2week@week+1day,-0week@week+1day</param>
            <param name="label">Last Two weeks</param>
        </list>
        <list>
            <param name="value">Last Three weeks,-3week@week+1day,-0week@week+1day</param>
            <param name="label">Last Three weeks</param>
        </list>
        <list>
            <param name="value">Current Month,-0month@month,-0day@day</param>
            <param name="label">Current Month</param>
        </list>
        <list>
            <param name="value">Last Month,-1month@month,-0month@month</param>
            <param name="label">Last Month</param>
        </list>
        <list>
            <param name="value">Last Two Months,-2month@month,-0month@month</param>
            <param name="label">Last Two Months</param>
        </list>
        <list>
            <param name="value">Last Three Months,-3month@month,-0month@month</param>
            <param name="label">Last Three Months</param>
        </list>
    </param>

    <param name="name">selectedTimeRange</param>
    <param name="label">Time Range</param>

    <module name="ValueSetter">
        <param name="delim">,</param>
        <param name="name">multivaluedKey</param>
        <param name="value">$selectedTimeRange$</param>



              <module name="Search" layoutPanel="panel_row1_col2" autoRun="True">
                  <param name="search">index="XXX" ENV=YYY EN=XX SRC=CCCC earliest=$multivaluedKey[1]$ latest=$multivaluedKey[2]$ | head 1 | addinfo 
                    | eval MyEarliest=info_min_time 
          | eval MyLatest=info_max_time 
          | eval MyEarliestString=strftime(info_min_time, "%Y-%m-%d %H:%M:%S") 
          | eval MyLatestString=strftime(info_max_time, "%Y-%m-%d %H:%M:%S") 
          | eval MyTimeRange=MyLatest-MyEarliest 
          | eval MySpanColumns=case( 
          MyTimeRange&lt;=86300,10,
          MyTimeRange&lt;=259100,60,
          MyTimeRange&lt;=604700,180,
          MyTimeRange&lt;=5183900,1440,       
          1=1,10080) 
          | eval MySpanColumnsLabel=case( 
          MyTimeRange&lt;=86300,"10 minutes",
          MyTimeRange&lt;=259100,"1 hour",
          MyTimeRange&lt;=604700,"3 hours", 
          MyTimeRange&lt;=5183900,"1 day",
          1=1,"1 week") 
          | eval MySummaryIndex=case( 
          MyTimeRange&lt;=86300,"local_sum_idx_vdc_10min",
          MyTimeRange&lt;=604700,"local_sum_idx_vdc_1hour", 
          1=1,"local_sum_idx_vdc_1day") 
          | eval MySummarySearch=case( 
          MyTimeRange&lt;=86300,"vdc_settings_delivered_by_c_10min",
          MyTimeRange&lt;=604700,"vdc_settings_delivered_by_c_1hour_new", 
          1=1,"vdc_settings_delivered_by_c_1day")         
          | table MySpanColumns, MySummaryIndex, MySummarySearch,MyEarliestString,MyLatestString,MyEarliest,MyLatest,MySpanColumnsLabel
        </param>
        <module name="JobProgressIndicator"/>

        <!-- Start of ResultsValueSetter -->
        <module name="ResultsValueSetter" layoutPanel="panel_row1_col1">
          <param name="fields">MySpanColumns, MySummaryIndex, MySummarySearch,MyEarliestString,MyLatestString,MyEarliest,MyLatest,MySpanColumnsLabel</param>
            <module name="HTML" layoutPanel="panel_row1_col2">
            <param name="html">
              <![CDATA[
              <html>
                <p>You have selected the time range from <b>$MyEarliestString$</b> to <b>$MyLatestString$</b>  with a resolution of <b>$MySpanColumnsLabel$</b> for column charts.</p>

              </html>
              ]]>
            </param>
          </module>



          <module name="Search" layoutPanel="panel_row2_col1" group="Customer Settings" autoRun="True">
            <param name="search">
                index=$MySummaryIndex$ search_name=$MySummarySearch$  earliest=$MyEarliest$ latest=$MyLatest$ 
              | sort C limit=0
              |  timechart span=$MySpanColumns$m count by C useother=false limit=0
            </param>
            <param name="groupLabel">Customer Settings</param>

            <module name="ViewstateAdapter">
              <param name="suppressionList">
                <item>count</item>
                <item>charting.axisTitleY.text</item>
                <item>charting.chart</item>
                <item>charting.chart.stackMode</item>
                <item>charting.secondaryAxisTitle.text</item>
                <item>charting.primaryAxisTitle.text</item>
                <item>displayRowNumbers</item>
                <item>charting.axisTitleX.text</item>
              </param>
              <module name="HiddenFieldPicker">
                <param name="strictMode">True</param>
                <module name="JobProgressIndicator">
                  <module name="EnablePreview">
                    <param name="enable">True</param>
                    <param name="display">False</param>
                    <module name="HiddenChartFormatter">
                      <param name="charting.axisTitleY.text"># of Settings</param>
                      <param name="charting.chart">column</param>
                      <param name="charting.chart.stackMode">stacked</param>
                      <param name="charting.axisTitleX.text">Time</param>
                      <param name="charting.legend.placement">right</param>
                      <param name="charting.chart.resultTruncationLimit">1000</param>
                      <module name="JSChart">
                        <param name="width">100%</param>
                        <param name="height">50%</param>
                        <module name="Gimp"/>
                      </module>
                    </module>
                  </module>
                </module>
              </module>
            </module>
            <module name="HTML">
              <param name="html">
                <![CDATA[
                <html>
                  <p>This measures the number of settings sent for each customer</p>
                  <p></p>
                </html>
                ]]>
              </param>
            </module>
          </module>
          </module>




          <!-- module name="ServerSideInclude" layoutPanel="panel_row16_col1">
            <param name="src">idm_HL.html</param>
          </module -->






          <!-- End of ResultsValueSetter -->
        </module>

        <!-- End of Outer Search -->
      </module>



    </module>       

</view>
Tags (2)

somesoni2
Revered Legend

Try this

<view onunloadCancelJobs="true" template="dashboard.html">
  <label>XXXXX</label>

  <module name="SideviewUtils" layoutPanel="appHeader"/>
  <!--module name="AppBar" layoutPanel="appHeader"/ -->

  <module name="Pulldown" layoutPanel="panel_row1_col1" autoRun="True">
    <param name="staticOptions">
      <list>
        <param name="value">LastThreeHours,-6h@h,-3h@h</param>
        <param name="label">Last Three Hours</param>
      </list>
      <list>
        <param name="value">Today,-0day@day,-3h@h</param>
        <param name="label">Today</param>
      </list>
      <list>
        <param name="value">Yesterday,-1day@day,-0day@day</param>
        <param name="label">Yesterday</param>
      </list>
      <list>
        <param name="value">Last Two Days,-2day@day,-0day@day</param>
        <param name="label">Last Two Days</param>
      </list>
      <list>
        <param name="value">Last Three Days,-3day@day,-0day@day</param>
        <param name="label">Last Three Days</param>
      </list>
      <list>
        <param name="value">Current week,-0week@week+1day,-3h@h</param>
        <param name="label">Current week</param>
      </list>
      <list>
        <param name="value">Last week,-1week@week+1day,-0week@week+1day</param>
        <param name="label">Last week</param>
      </list>
      <list>
        <param name="value">Last Two weeks,-2week@week+1day,-0week@week+1day</param>
        <param name="label">Last Two weeks</param>
      </list>
      <list>
        <param name="value">Last Three weeks,-3week@week+1day,-0week@week+1day</param>
        <param name="label">Last Three weeks</param>
      </list>
      <list>
        <param name="value">Current Month,-0month@month,-0day@day</param>
        <param name="label">Current Month</param>
      </list>
      <list>
        <param name="value">Last Month,-1month@month,-0month@month</param>
        <param name="label">Last Month</param>
      </list>
      <list>
        <param name="value">Last Two Months,-2month@month,-0month@month</param>
        <param name="label">Last Two Months</param>
      </list>
      <list>
        <param name="value">Last Three Months,-3month@month,-0month@month</param>
        <param name="label">Last Three Months</param>
      </list>
    </param>

    <param name="name">selectedTimeRange</param>
    <param name="label">Time Range</param>

    <module name="ValueSetter">
      <param name="delim">,</param>
      <param name="name">multivaluedKey</param>
      <param name="value">$selectedTimeRange$</param>

      <module name="Search" layoutPanel="panel_row1_col2" autoRun="True">
        <param name="search">
          | gentimes start=-1 | addinfo
          | eval MyEarliest=info_min_time
          | eval MyLatest=info_max_time
          | eval MyEarliestString=strftime(info_min_time, "%Y-%m-%d %H:%M:%S")
          | eval MyLatestString=strftime(info_max_time, "%Y-%m-%d %H:%M:%S")
          | eval MyTimeRange=MyLatest-MyEarliest
          | eval MySpanColumns=case(
          MyTimeRange&lt;=86300,10,
          MyTimeRange&lt;=259100,60,
          MyTimeRange&lt;=604700,180,
          MyTimeRange&lt;=5183900,1440,
          1=1,10080)
          | eval MySpanColumnsLabel=case(
          MyTimeRange&lt;=86300,"10 minutes",
          MyTimeRange&lt;=259100,"1 hour",
          MyTimeRange&lt;=604700,"3 hours",
          MyTimeRange&lt;=5183900,"1 day",
          1=1,"1 week")
          | eval MySummaryIndex=case(
          MyTimeRange&lt;=86300,"local_sum_idx_vdc_10min",
          MyTimeRange&lt;=604700,"local_sum_idx_vdc_1hour",
          1=1,"local_sum_idx_vdc_1day")
          | eval MySummarySearch=case(
          MyTimeRange&lt;=86300,"vdc_settings_delivered_by_c_10min",
          MyTimeRange&lt;=604700,"vdc_settings_delivered_by_c_1hour_new",
          1=1,"vdc_settings_delivered_by_c_1day")
          | table MySpanColumns, MySummaryIndex, MySummarySearch,MyEarliestString,MyLatestString,MyEarliest,MyLatest,MySpanColumnsLabel
        </param>
        <param name="earliest">$multivaluedKey[1]$</param>
        <param name="latest">$multivaluedKey[2]$</param>
        <module name="JobProgressIndicator"/>

        <!-- Start of ResultsValueSetter -->
        <module name="ResultsValueSetter" layoutPanel="panel_row1_col1">
          <param name="fields">MySpanColumns, MySummaryIndex, MySummarySearch,MyEarliestString,MyLatestString,MyEarliest,MyLatest,MySpanColumnsLabel</param>
          <module name="HTML" layoutPanel="panel_row1_col2">
            <param name="html">
              <![CDATA[
              <html>
                <p>You have selected the time range from <b>$MyEarliestString$</b> to <b>$MyLatestString$</b>  with a resolution of <b>$MySpanColumnsLabel$</b> for column charts.</p>

              </html>
              ]]>
            </param>
          </module>

          <module name="Search" layoutPanel="panel_row2_col1" group="Customer Settings" autoRun="True">
            <param name="search">
              index=$MySummaryIndex$ search_name=$MySummarySearch$  earliest=$MyEarliest$ latest=$MyLatest$
              | sort C limit=0
              |  timechart span=$MySpanColumns$m count by C useother=false limit=0
            </param>
            <param name="groupLabel">Customer Settings</param>

            <module name="ViewstateAdapter">
              <param name="suppressionList">
                <item>count</item>
                <item>charting.axisTitleY.text</item>
                <item>charting.chart</item>
                <item>charting.chart.stackMode</item>
                <item>charting.secondaryAxisTitle.text</item>
                <item>charting.primaryAxisTitle.text</item>
                <item>displayRowNumbers</item>
                <item>charting.axisTitleX.text</item>
              </param>
              <module name="HiddenFieldPicker">
                <param name="strictMode">True</param>
                <module name="JobProgressIndicator">
                  <module name="EnablePreview">
                    <param name="enable">True</param>
                    <param name="display">False</param>
                    <module name="HiddenChartFormatter">
                      <param name="charting.axisTitleY.text"># of Settings</param>
                      <param name="charting.chart">column</param>
                      <param name="charting.chart.stackMode">stacked</param>
                      <param name="charting.axisTitleX.text">Time</param>
                      <param name="charting.legend.placement">right</param>
                      <param name="charting.chart.resultTruncationLimit">1000</param>
                      <module name="JSChart">
                        <param name="width">100%</param>
                        <param name="height">50%</param>
                        <module name="Gimp"/>
                      </module>
                    </module>
                  </module>
                </module>
              </module>
            </module>
            <module name="HTML">
              <param name="html">
                <![CDATA[
                <html>
                  <p>This measures the number of settings sent for each customer</p>
                  <p></p>
                </html>
                ]]>
              </param>
            </module>
          </module>
        </module>
        <!-- End of ResultsValueSetter -->
      </module>
      <!-- End of Outer Search -->
    </module>
  </module>
</view>
0 Karma

abhayneilam
Contributor

I am still getting the same error in the pop up window "Error-Pulldown is configured statically but with only a single static option."

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...