Dashboards & Visualizations

How to set a drop-down default value for a linked form when used by itself?

rsxrox
Explorer

I currently have a form that is a destination form for a dashboard drilldown. Upon clicking a value on the pie chart on the dashboard, I'll be directed to this form with a token $version_remote$.

        <drilldown>
          <link>/app/myapp/destination_form?version_remote=$click.value$</link>
        </drilldown>

This form has an input drop-down. I've set the default value of this drop-down as the token from the source dashboard drilldown link ( $version_remote$)

  <input type="dropdown" token="version_local" searchWhenChanged="true">
      <label>Version:</label>
      <search>
        <query>index=myapp sourcetype=my_app_csv | stats count(app_id) by app_release| sort -app_release</query>
      </search>
      <fieldForLabel>app_release</fieldForLabel>
      <fieldForValue>app_release</fieldForValue>
      <choice value="*">All</choice>
      <default>$version_remote$</default>
    </input>

I'm also going to use this form by itself (not thru dashboard drilldown). When using the form by itself, I'd like the default value to be set to 'All'.

Can you please let me know how I can do this using the same form?

0 Karma
1 Solution

somesoni2
Revered Legend

In the drilldown dashboard, keep the token name for the dropdown same as what is being passed from other dashboard and set the default to all. Something like this (remember to update all reference of version_local with version_remote)

<input type="dropdown" token="version_remote" searchWhenChanged="true">
       <label>Version:</label>
       <search>
         <query>index=myapp sourcetype=my_app_csv | stats count(app_id) by app_release| sort -app_release</query>
       </search>
       <fieldForLabel>app_release</fieldForLabel>
       <fieldForValue>app_release</fieldForValue>
       <choice value="*">All</choice>
       <default>All</default>
     </input>

View solution in original post

somesoni2
Revered Legend

In the drilldown dashboard, keep the token name for the dropdown same as what is being passed from other dashboard and set the default to all. Something like this (remember to update all reference of version_local with version_remote)

<input type="dropdown" token="version_remote" searchWhenChanged="true">
       <label>Version:</label>
       <search>
         <query>index=myapp sourcetype=my_app_csv | stats count(app_id) by app_release| sort -app_release</query>
       </search>
       <fieldForLabel>app_release</fieldForLabel>
       <fieldForValue>app_release</fieldForValue>
       <choice value="*">All</choice>
       <default>All</default>
     </input>

rsxrox
Explorer

Cool, this worked. Only other change that I had to do was change the version_remote in drilldown tag in the source dashboard to form.version_remote, like below.
<link>/app/myapp/destination_form?form.version_remote=$click.value$</link>
</drilldown>

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...