Dashboards & Visualizations

Dropdown not populating

shaoli21
New Member

| djquery -database ad -query "select short_description from bu_projectdetails order by [order]"

this is the given query........when I am replacing this with lookup files, although result is coming in the search but not in the dropdown.

| inputlookup bu_projectdetails_lookup.csv |table short_description|sort by [order]

alt text

Tags (2)
0 Karma

somesoni2
Revered Legend

Try this for you search.

| inputlookup bu_projectdetails_lookup.csv |table short_description|sort short_description
0 Karma

shaoli21
New Member

its showing the same thing, "could not create search"

0 Karma

vnravikumar
Champion

if possible can you post your xml?

0 Karma

shaoli21
New Member
    <label>Milestones</label>
    <choice value="*">All</choice>
    <search>
      <query>| djquery -database ad -query "select short_description from bu_projectdetails order by [order]"</query>
    </search>
    <fieldForLabel>short_description</fieldForLabel>
    <fieldForValue>short_description</fieldForValue>
    <default>*</default>
    <valuePrefix>short_description="</valuePrefix>
    <valueSuffix>"</valueSuffix>
    <delimiter> OR </delimiter>
  </input>
0 Karma

493669
Super Champion

@shaoli21, did you tried below-

<label>Milestones</label>
     <choice value="*">All</choice>
     <search>
       <query>| inputlookup bu_projectdetails_lookup.csv |table short_description|sort short_description</query>
     </search>
     <fieldForLabel>short_description</fieldForLabel>
     <fieldForValue>short_description</fieldForValue>
     <default>*</default>
     <valuePrefix>short_description="</valuePrefix>
     <valueSuffix>"</valueSuffix>
     <delimiter> OR </delimiter>
   </input>
0 Karma

nickhills
Ultra Champion

oh yeah, missed that 🙂

If my comment helps, please give it a thumbs up!
0 Karma

nickhills
Ultra Champion

Have you set

<fieldForLabel>short_description</fieldForLabel>
<fieldForValue>short_description</fieldForValue>

In the dropdown settings?

If my comment helps, please give it a thumbs up!
0 Karma

shaoli21
New Member

yes I had set them but still no output

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...