Dashboards & Visualizations

How to set a drop-down default value for a linked form when used by itself?

rsxrox
Explorer

I currently have a form that is a destination form for a dashboard drilldown. Upon clicking a value on the pie chart on the dashboard, I'll be directed to this form with a token $version_remote$.

        <drilldown>
          <link>/app/myapp/destination_form?version_remote=$click.value$</link>
        </drilldown>

This form has an input drop-down. I've set the default value of this drop-down as the token from the source dashboard drilldown link ( $version_remote$)

  <input type="dropdown" token="version_local" searchWhenChanged="true">
      <label>Version:</label>
      <search>
        <query>index=myapp sourcetype=my_app_csv | stats count(app_id) by app_release| sort -app_release</query>
      </search>
      <fieldForLabel>app_release</fieldForLabel>
      <fieldForValue>app_release</fieldForValue>
      <choice value="*">All</choice>
      <default>$version_remote$</default>
    </input>

I'm also going to use this form by itself (not thru dashboard drilldown). When using the form by itself, I'd like the default value to be set to 'All'.

Can you please let me know how I can do this using the same form?

0 Karma
1 Solution

somesoni2
Revered Legend

In the drilldown dashboard, keep the token name for the dropdown same as what is being passed from other dashboard and set the default to all. Something like this (remember to update all reference of version_local with version_remote)

<input type="dropdown" token="version_remote" searchWhenChanged="true">
       <label>Version:</label>
       <search>
         <query>index=myapp sourcetype=my_app_csv | stats count(app_id) by app_release| sort -app_release</query>
       </search>
       <fieldForLabel>app_release</fieldForLabel>
       <fieldForValue>app_release</fieldForValue>
       <choice value="*">All</choice>
       <default>All</default>
     </input>

View solution in original post

somesoni2
Revered Legend

In the drilldown dashboard, keep the token name for the dropdown same as what is being passed from other dashboard and set the default to all. Something like this (remember to update all reference of version_local with version_remote)

<input type="dropdown" token="version_remote" searchWhenChanged="true">
       <label>Version:</label>
       <search>
         <query>index=myapp sourcetype=my_app_csv | stats count(app_id) by app_release| sort -app_release</query>
       </search>
       <fieldForLabel>app_release</fieldForLabel>
       <fieldForValue>app_release</fieldForValue>
       <choice value="*">All</choice>
       <default>All</default>
     </input>

rsxrox
Explorer

Cool, this worked. Only other change that I had to do was change the version_remote in drilldown tag in the source dashboard to form.version_remote, like below.
<link>/app/myapp/destination_form?form.version_remote=$click.value$</link>
</drilldown>

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...