Dashboards & Visualizations

Dropdown not populating

shaoli21
New Member

| djquery -database ad -query "select short_description from bu_projectdetails order by [order]"

this is the given query........when I am replacing this with lookup files, although result is coming in the search but not in the dropdown.

| inputlookup bu_projectdetails_lookup.csv |table short_description|sort by [order]

alt text

Tags (2)
0 Karma

somesoni2
Revered Legend

Try this for you search.

| inputlookup bu_projectdetails_lookup.csv |table short_description|sort short_description
0 Karma

shaoli21
New Member

its showing the same thing, "could not create search"

0 Karma

vnravikumar
Champion

if possible can you post your xml?

0 Karma

shaoli21
New Member
    <label>Milestones</label>
    <choice value="*">All</choice>
    <search>
      <query>| djquery -database ad -query "select short_description from bu_projectdetails order by [order]"</query>
    </search>
    <fieldForLabel>short_description</fieldForLabel>
    <fieldForValue>short_description</fieldForValue>
    <default>*</default>
    <valuePrefix>short_description="</valuePrefix>
    <valueSuffix>"</valueSuffix>
    <delimiter> OR </delimiter>
  </input>
0 Karma

493669
Super Champion

@shaoli21, did you tried below-

<label>Milestones</label>
     <choice value="*">All</choice>
     <search>
       <query>| inputlookup bu_projectdetails_lookup.csv |table short_description|sort short_description</query>
     </search>
     <fieldForLabel>short_description</fieldForLabel>
     <fieldForValue>short_description</fieldForValue>
     <default>*</default>
     <valuePrefix>short_description="</valuePrefix>
     <valueSuffix>"</valueSuffix>
     <delimiter> OR </delimiter>
   </input>
0 Karma

nickhills
Ultra Champion

oh yeah, missed that 🙂

If my comment helps, please give it a thumbs up!
0 Karma

nickhills
Ultra Champion

Have you set

<fieldForLabel>short_description</fieldForLabel>
<fieldForValue>short_description</fieldForValue>

In the dropdown settings?

If my comment helps, please give it a thumbs up!
0 Karma

shaoli21
New Member

yes I had set them but still no output

0 Karma
Get Updates on the Splunk Community!

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Deprecation of Splunk Observability Kubernetes “Classic Navigator” UI starting ...

Access to Splunk Observability Kubernetes “Classic Navigator” UI will no longer be available starting January ...

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...