Dashboards & Visualizations

Why is my dynamic dropdown getting stuck in a populating/loading display when entering a search?

vamshi245
New Member

I am using a dynamic dropdown, with the below search

<basesearch> |dedup REGN|table REGN 

When i run this search i see the below results

alt text

But, when I use the above search in the dropdown, I see populating displayed for a while and then when I click the Dropdown, i see the below and the circle spins forever. What am I doing wrong here? Below is my Dropdown code

alt text

    <input type="dropdown" token="Region" searchWhenChanged="true">
      <search>
    <query><basesearch>| dedup REGN | table REGN</query>
    <earliest>-60m@m</earliest>
    <latest>now</latest>
  </search>
  <fieldForLabel>Region</fieldForLabel>
  <fieldForValue>Region</fieldForValue>
</input>

Also, can i use the Shared TimePicker for the dynamic dropdown query?

0 Karma

lquinn
Contributor

I saw this same error fairly recently on a version of Splunk 6.3. I used the following search for my dropdown:

| inputlookup mycsv.csv | table MyField

I eventually found that the reason for the ever spinning circle was that I had some empty field values in my csv. I tried using fillnull in my search, so that there were no null fields, but I still encountered the same issue. Finally I manually edited the csv and replaced the blank field values with zeros and it worked.

Any chance you have any blank field values in the data that you are searching?

The way I found this was because there was a javascript error when I clicked on the dropdown. You probably have the same - if the above is not relevant to you, perhaps you could let us know the javascript error, assuming there is one? (Found by opening developer tools in your browser)

0 Karma

lquinn
Contributor

Note: My error was fixed as of 6.5, didn't test on 6.4.

0 Karma

vamshi245
New Member

Thanks @lquinn - the issue was the values for below fields. I changed it to REGN, the table column name from the query and it worked.

<fieldForLabel>Region</fieldForLabel>
   <fieldForValue>Region</fieldForValue>
0 Karma

lquinn
Contributor

Yep, you're right, those two fields definitely should be matching! You should post that as the answer and accept since that solves your issue.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...