Dashboards & Visualizations

Simple Dropdown

DTERM
Contributor

I'm trying to create a dropdown based on the following query:

index=MyApp tgtHostname=$tgtHostname$

The form is there and the default value of "any" seems to work. However the dropdown is not populated. Any idea why? Thanks.

<form>
  <label>My form search</label>
  <searchTemplate>index=MyApp tgtHostname=$tgtHostname$</searchTemplate>

  <fieldset>
    <input type="dropdown" token="tgtHostname">
       <label>Select the hostname</label>
       <populatingSearch fieldForValue="tgtHostname" fieldForLabel="tgtHostname"><![CDATA[index=MyApp tgtHostname=$tgtHostname$]]></populatingSearch>
     <default>somehost.somedomain.com</default>
     <choice value="*">Any</choice>
    </input>
  </fieldset>

  <row>
   <table>
     <title>Host Names</title>
     <option name="showPager">true</option>
   </table>
   </row>
</form>
Tags (1)
0 Karma
1 Solution

RicoSuave
Builder
<form>
<label>My form search</label> 
<searchTemplate>index=MyApp tgtHostname=$tgtHostname$</searchTemplate> 
<fieldset> 
 <input type="dropdown" token="tgtHostname"> 
   <label>Select the hostname</label> 
     <populatingSearch fieldForValue="tgtHostname" fieldForLabel="tgtHostname"><![CDATA[index=MyApp | stats count by tgtHostname]]></populatingSearch> 
     <default>somehost.somedomain.com</default> 
     <choice value="*">Any</choice> 
 </input> 
</fieldset> 
<row> 
<title>Host Names</title> 
<option name="showPager">true</option>
</row> 
</form>

View solution in original post

RicoSuave
Builder
<form>
<label>My form search</label> 
<searchTemplate>index=MyApp tgtHostname=$tgtHostname$</searchTemplate> 
<fieldset> 
 <input type="dropdown" token="tgtHostname"> 
   <label>Select the hostname</label> 
     <populatingSearch fieldForValue="tgtHostname" fieldForLabel="tgtHostname"><![CDATA[index=MyApp | stats count by tgtHostname]]></populatingSearch> 
     <default>somehost.somedomain.com</default> 
     <choice value="*">Any</choice> 
 </input> 
</fieldset> 
<row> 
<title>Host Names</title> 
<option name="showPager">true</option>
</row> 
</form>

RicoSuave
Builder

Watch your syntax as well. It's not shown here since the code sample widget didn't work for me, but make sure you have an upper Case T in searchTemplate, Uppercase F and L in fieldForLabel and uppercase F and V in fieldForValue

0 Karma

RicoSuave
Builder

I have no clue why the code sample box isn't working for me, but that should do it for you.

0 Karma
Get Updates on the Splunk Community!

CX Day is Coming!

Customer Experience (CX) Day is on October 7th!! We're so excited to bring back another day full of wonderful ...

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...