Dashboards & Visualizations

System input will not repopulate when time range picker selection is changed

zd00191
Communicator

Hello. I have a dashboard with two inputs to select from a the top. One is te time range picker and the other is System. When I change the time range picker, the System input drop down does not repopulate. Can anyone please explain why? I have put the top of the xml below?

 <form>
  <label>CA Autosys Executive Summary</label>
  <fieldset autoRun="true" submitButton="false">
    <input type="time" searchWhenChanged="true" token="dashboardTime">
      <default>
        <earliestTime>@d</earliestTime>
        <latestTime>now</latestTime>
      </default>
    </input>
    <input type="dropdown" token="System" searchWhenChanged="true">
      <label>System</label>
      <choice value="*">All</choice>
      <default>*</default>
      <populatingSearch fieldForValue="System" fieldForLabel="System">
        <![CDATA[ index=ko_autosys sourcetype=autosys_applog_scheduler_events host="usatlb98" OR host="usatlb91" $dashboardTime$ |stats count by System ]]>
      </populatingSearch>
    </input>
  </fieldset>
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

That's because you're not setting the time range properly on the populatingSearch. Should be like this:

<populatingSearch earliest="$dashboardTime.earliest$" latest="$dashboardTime.latest$" ...>

http://docs.splunk.com/Documentation/Splunk/6.2.3/Viz/PanelreferenceforSimplifiedXML

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

That's because you're not setting the time range properly on the populatingSearch. Should be like this:

<populatingSearch earliest="$dashboardTime.earliest$" latest="$dashboardTime.latest$" ...>

http://docs.splunk.com/Documentation/Splunk/6.2.3/Viz/PanelreferenceforSimplifiedXML

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

AI is one of the biggest topics in the market today, and for security teams, its value goes far beyond the ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

[REGISTER HERE] This thread is for the Community Office Hours session on Detection Engineering Office Hours: ...