Dropdown field not getting populated by populatingSearch

[asherman]

Hi,

The following code produces results (via searchTemplate), but does not populate my dropdown menu. Data is stored as lines of comma delimited key=value pairs, e.g., colour=red,block=lab,corner=100c. Note that the searches are identical for the searchTemplate and populatingSearch inputs.

Sample form index=test_index3 | fields block | dedup block | stats values(block)

All index=test_index3 | fields block | dedup block | stats values(block) Block *

Am I misusing the dropdown/populatingSearch syntax somehow?

[aweitzman · Accepted solution]

Use table block instead of stats values(block) after the dedup block phrase of the populating search.

[surekhasplunk]

am using below code

  <label>Email ID</label>
  <search>
    <query>index=snow description=*CPU* number=INC0010007 | table sys_created_by</query>
    <earliest>0</earliest>
    <latest></latest>
  </search>
  <fieldForLabel>emailid</fieldForLabel>
  <fieldForValue>emailid</fieldForValue>
</input>

but my dropdown isn't getting populated whereas the query gives me result.