Dashboards & Visualizations

How to set a drop-down default value for a linked form when used by itself?

rsxrox
Explorer

I currently have a form that is a destination form for a dashboard drilldown. Upon clicking a value on the pie chart on the dashboard, I'll be directed to this form with a token $version_remote$.

        <drilldown>
          <link>/app/myapp/destination_form?version_remote=$click.value$</link>
        </drilldown>

This form has an input drop-down. I've set the default value of this drop-down as the token from the source dashboard drilldown link ( $version_remote$)

  <input type="dropdown" token="version_local" searchWhenChanged="true">
      <label>Version:</label>
      <search>
        <query>index=myapp sourcetype=my_app_csv | stats count(app_id) by app_release| sort -app_release</query>
      </search>
      <fieldForLabel>app_release</fieldForLabel>
      <fieldForValue>app_release</fieldForValue>
      <choice value="*">All</choice>
      <default>$version_remote$</default>
    </input>

I'm also going to use this form by itself (not thru dashboard drilldown). When using the form by itself, I'd like the default value to be set to 'All'.

Can you please let me know how I can do this using the same form?

0 Karma
1 Solution

somesoni2
Revered Legend

In the drilldown dashboard, keep the token name for the dropdown same as what is being passed from other dashboard and set the default to all. Something like this (remember to update all reference of version_local with version_remote)

<input type="dropdown" token="version_remote" searchWhenChanged="true">
       <label>Version:</label>
       <search>
         <query>index=myapp sourcetype=my_app_csv | stats count(app_id) by app_release| sort -app_release</query>
       </search>
       <fieldForLabel>app_release</fieldForLabel>
       <fieldForValue>app_release</fieldForValue>
       <choice value="*">All</choice>
       <default>All</default>
     </input>

View solution in original post

somesoni2
Revered Legend

In the drilldown dashboard, keep the token name for the dropdown same as what is being passed from other dashboard and set the default to all. Something like this (remember to update all reference of version_local with version_remote)

<input type="dropdown" token="version_remote" searchWhenChanged="true">
       <label>Version:</label>
       <search>
         <query>index=myapp sourcetype=my_app_csv | stats count(app_id) by app_release| sort -app_release</query>
       </search>
       <fieldForLabel>app_release</fieldForLabel>
       <fieldForValue>app_release</fieldForValue>
       <choice value="*">All</choice>
       <default>All</default>
     </input>

rsxrox
Explorer

Cool, this worked. Only other change that I had to do was change the version_remote in drilldown tag in the source dashboard to form.version_remote, like below.
<link>/app/myapp/destination_form?form.version_remote=$click.value$</link>
</drilldown>

0 Karma
Get Updates on the Splunk Community!

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability As businesses scale ...