Dashboards & Visualizations

Setting token for a dropdwn with a search and init

fabrizioalleva
Path Finder

Hello,
I'm trying from an initial search to put the value into a token to use it as a default initial value for a dropdown list something like this:

<form script="table_with_buttons.js">
      <search>
        <query>
            | makeresults
            | eval day=strftime(now(), "%d")
            | fields day  
        </query>
        <done>
          <set token="day">$result.day$</set>
        </done>
      </search>
      <init>
        <set token="start_day">$day$</set>
       </init>
  <row>
    <panel>
      <title>Data Inizio</title>
      <input type="dropdown" token="start_day">
        <label>Giorno $start_day$</label>
        <fieldForLabel>giorno</fieldForLabel>
        <fieldForValue>giornoid</fieldForValue>
        <search>
          <query>|inputlookup day.csv| table dayid day</query>
        </search>
        <choice value="$start_day$">$start_day$</choice>
        <default>$start_day$</default>
      </input>
    </panel>
  </row>
<form>

at runtime what I obtain is shown in the picture :

alt text

Any Suggestion ?
Thanks
Fabrizio

Tags (3)
0 Karma
1 Solution

vnravikumar
Champion

Hi

Check this, Please correct fieldForLabel and fieldForValue based on your query

<form script="table_with_buttons.js">
  <search>
    <query>
             | makeresults
             | eval day=strftime(now(), "%d")
             | fields day  
         </query>
    <done>
      <set token="day">$result.day$</set>
    </done>
  </search>
  <init>
    <set token="start_day">$day$</set>
  </init>
  <fieldset submitButton="false"></fieldset>
  <row>
    <panel>
      <title>Data Inizio</title>
      <input type="dropdown" token="start_day">
        <label>Giorno $start_day$</label>
        <fieldForLabel>day</fieldForLabel>
        <fieldForValue>day</fieldForValue>
        <search>
          <query>| makeresults count=31 | streamstats count as day</query>
        </search>
        <default>$start_day$</default>
      </input>
    </panel>
  </row>
</form>

View solution in original post

0 Karma

vnravikumar
Champion

Hi

Check this, Please correct fieldForLabel and fieldForValue based on your query

<form script="table_with_buttons.js">
  <search>
    <query>
             | makeresults
             | eval day=strftime(now(), "%d")
             | fields day  
         </query>
    <done>
      <set token="day">$result.day$</set>
    </done>
  </search>
  <init>
    <set token="start_day">$day$</set>
  </init>
  <fieldset submitButton="false"></fieldset>
  <row>
    <panel>
      <title>Data Inizio</title>
      <input type="dropdown" token="start_day">
        <label>Giorno $start_day$</label>
        <fieldForLabel>day</fieldForLabel>
        <fieldForValue>day</fieldForValue>
        <search>
          <query>| makeresults count=31 | streamstats count as day</query>
        </search>
        <default>$start_day$</default>
      </input>
    </panel>
  </row>
</form>
0 Karma

fabrizioalleva
Path Finder

It doesn't work in the dropdown the default value is not 15 ( today ) is always $day$.
It seems that Splunk doesn't accept the first query which pass the today value in the token.
The porpouse is to load a dropdown with the list of days, and by default to show the today value.

Thanks

0 Karma

vnravikumar
Champion

Can you try this

<form script="table_with_buttons.js">
  <search>
    <query>
             | makeresults
             | eval day=strftime(now(), "%d")
             | fields day  
         </query>
    <done>
      <set token="day">$result.day$</set>
    </done>
  </search>
  <fieldset submitButton="false"></fieldset>
  <row>
    <panel>
      <title>Data Inizio</title>
      <input type="dropdown" token="start_day">
        <label>Giorno $day$</label>
        <fieldForLabel>day</fieldForLabel>
        <fieldForValue>day</fieldForValue>
        <search>
          <query>| makeresults count=31 | streamstats count as day</query>
        </search>
        <default>$day$</default>
      </input>
    </panel>
  </row>
</form>
0 Karma

fabrizioalleva
Path Finder

Ok this works fine !
Thanks a lot!
How can I accept this as ansswer ??

0 Karma

vnravikumar
Champion

please click accept button

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...