Why am I not seeing my drilldown in Splunk 6.0.1?

[ramprakash]

Hi everyone.

I am using Splunk 6.0.1 and I want to add a dropdown drilldown in one of my panels. The problem is I am not seeing options like Checkbox,Radio,dropdown.

Can anyone help me with this?

[martin_mueller]

Splunk 6.0 had an extremely restricted early version of SimpleXML, most things you see today didn't exist back then. Dropdowns did exist back then, but if I remember correctly you had to edit them via the XML code. Here's the docs: https://docs.splunk.com/Documentation/Splunk/6.0.1/Viz/PanelreferenceforSimplifiedXML#input_.28dropd...

[ramprakash]

Thanks Martin. I am checking the document but i am stucked with XML. Could you please help me making dropdown ? I want to make dropdown for different values of kw_mh_type. Thanks in advance

index=ip_tux_metadata source=SWIFTBROKER s_event=MSG_RECEIVE e_listener=JmsMessageListener kw_mh_type!=ACK* kw_mh_type!=setr.016* kw_mh_type!=setr.057* kw_mh_nature=SWIFTMX| timechart span=10m count by kw_mh_type

[martin_mueller]

Update to a recent version.

[ramprakash]

Yes i understand but my company is targeting December for up gradation. Is there any help i can get in making forms ?

[martin_mueller]

Update to a recent version.

[kmaron]

I think you may be confusing drilldown and form inputs.

Checkbox, Radio, Dropdown are form inputs. If you're in edit mode there is a button at the top that says "+ Add Input" and opens up a dropdown of selections. That would be how you add a form input in whatever format you want (radio button, dropdown, checkbox, etc)
https://docs.splunk.com/Documentation/Splunk/6.0.1/Viz/Overviewofdashboards

Drilldown is where you determine what happens when a user clicks on the data in a panel and it was not introduced until Splunk version 6.6.

Hopefully this helps.

[ramprakash]

I am also not seeing Add Input options in Splunk 6.0.1. Directly making changes in XML for forms is tough for me.