Dashboards & Visualizations

System input will not repopulate when time range picker selection is changed

zd00191
Communicator

Hello. I have a dashboard with two inputs to select from a the top. One is te time range picker and the other is System. When I change the time range picker, the System input drop down does not repopulate. Can anyone please explain why? I have put the top of the xml below?

 <form>
  <label>CA Autosys Executive Summary</label>
  <fieldset autoRun="true" submitButton="false">
    <input type="time" searchWhenChanged="true" token="dashboardTime">
      <default>
        <earliestTime>@d</earliestTime>
        <latestTime>now</latestTime>
      </default>
    </input>
    <input type="dropdown" token="System" searchWhenChanged="true">
      <label>System</label>
      <choice value="*">All</choice>
      <default>*</default>
      <populatingSearch fieldForValue="System" fieldForLabel="System">
        <![CDATA[ index=ko_autosys sourcetype=autosys_applog_scheduler_events host="usatlb98" OR host="usatlb91" $dashboardTime$ |stats count by System ]]>
      </populatingSearch>
    </input>
  </fieldset>
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

That's because you're not setting the time range properly on the populatingSearch. Should be like this:

<populatingSearch earliest="$dashboardTime.earliest$" latest="$dashboardTime.latest$" ...>

http://docs.splunk.com/Documentation/Splunk/6.2.3/Viz/PanelreferenceforSimplifiedXML

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

That's because you're not setting the time range properly on the populatingSearch. Should be like this:

<populatingSearch earliest="$dashboardTime.earliest$" latest="$dashboardTime.latest$" ...>

http://docs.splunk.com/Documentation/Splunk/6.2.3/Viz/PanelreferenceforSimplifiedXML

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...