Dashboards & Visualizations

SearchSelectLister : default value

LauraBre
Communicator

Hello,

I have two dropdowns. One is a dropdown where I am values of a field in static and the over in dynamic. I want to put a value default for the second dropdown but All doesn't work, when I open my view the second dropdown has the value
"choose an option above". Moreover I want that the search by default launch automatically when I open my view, how can do it?

Please by advance,

Laura


Requester
Requester


All



fr18126
fr18126


a187571
a187571


All

Requester

addterm

$target$

indexed


Users_setting
Select a user
source="tcp:5543" Users="" |top Users
True


All
*




Users
Users


All

Users_setting

addterm

$target$

indexed

Tags (2)
0 Karma

Lamar
Splunk Employee
Splunk Employee

Laura,
You could do this to have your search automatically initiate when you open the view.

<module name="HiddenSearch" autoRun="True">
  <param name="search">source="tcp:5543"</param>
  <module name="StaticSelect">
    <param name="settingToCreate">Requester</param>
    <param name="label">Requester</param>
    <param name="staticFieldsToDisplay">
      <list>
    <param name="label">All</param>
    <param name="value">*</param>
      </list>
      <list>
    <param name="label">fr18126</param>
    <param name="value">fr18126</param>
      </list>
      <list>
    <param name="label">a187571</param>
    <param name="value">a187571</param>
      </list>
    </param>

Lamar
Splunk Employee
Splunk Employee

Please make sure you accept this as your answer in the event someone else has an issue similar to yours. Thank you.

0 Karma

LauraBre
Communicator

Thx very much to your answer. The "autoRun=true" resolves my 2 problems.

0 Karma

Lamar
Splunk Employee
Splunk Employee

Also, make note that I've put a * in your value for your 'All" label in your StaticSelect so that when your search runs it will inject a * in your Requester value.

0 Karma
Get Updates on the Splunk Community!

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...

Want to Reduce Costs, Mitigate Risk, Improve Performance, or Increase Efficiencies? ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...