Dashboards & Visualizations

Dropdown not populating

shaoli21
New Member

| djquery -database ad -query "select short_description from bu_projectdetails order by [order]"

this is the given query........when I am replacing this with lookup files, although result is coming in the search but not in the dropdown.

| inputlookup bu_projectdetails_lookup.csv |table short_description|sort by [order]

alt text

Tags (2)
0 Karma

somesoni2
Revered Legend

Try this for you search.

| inputlookup bu_projectdetails_lookup.csv |table short_description|sort short_description
0 Karma

shaoli21
New Member

its showing the same thing, "could not create search"

0 Karma

vnravikumar
Champion

if possible can you post your xml?

0 Karma

shaoli21
New Member
    <label>Milestones</label>
    <choice value="*">All</choice>
    <search>
      <query>| djquery -database ad -query "select short_description from bu_projectdetails order by [order]"</query>
    </search>
    <fieldForLabel>short_description</fieldForLabel>
    <fieldForValue>short_description</fieldForValue>
    <default>*</default>
    <valuePrefix>short_description="</valuePrefix>
    <valueSuffix>"</valueSuffix>
    <delimiter> OR </delimiter>
  </input>
0 Karma

493669
Super Champion

@shaoli21, did you tried below-

<label>Milestones</label>
     <choice value="*">All</choice>
     <search>
       <query>| inputlookup bu_projectdetails_lookup.csv |table short_description|sort short_description</query>
     </search>
     <fieldForLabel>short_description</fieldForLabel>
     <fieldForValue>short_description</fieldForValue>
     <default>*</default>
     <valuePrefix>short_description="</valuePrefix>
     <valueSuffix>"</valueSuffix>
     <delimiter> OR </delimiter>
   </input>
0 Karma

nickhills
Ultra Champion

oh yeah, missed that 🙂

If my comment helps, please give it a thumbs up!
0 Karma

nickhills
Ultra Champion

Have you set

<fieldForLabel>short_description</fieldForLabel>
<fieldForValue>short_description</fieldForValue>

In the dropdown settings?

If my comment helps, please give it a thumbs up!
0 Karma

shaoli21
New Member

yes I had set them but still no output

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...