Why is the dashboard very slow and crashing because of the multi-select box?

[kokanne]

Hello,

My dashboard is running very slow and crashes my browser ever since I changed the text box to a multiselect box. This is because it was requested by a coworker who wants to put in multiple values at a time.

The search behind the multi value is schedulded once a week, and seems to be running very smoothly.
The problem really is the multi select, when you click on it and it drops down, it becomes super slow and you can't click or type anything, it will make your browser unresponsive.

The dashboard code:

<form>
  <label>V2 Clone</label>
  <fieldset submitButton="true">
    <input type="text" token="qid_text">
      <label>ID</label>
      <default>*</default>
    </input>
    <input type="multiselect" token="cve_id" searchWhenChanged="true">
      <label>ID</label>
      <prefix> "</prefix>
      <suffix>"</suffix>
      <valuePrefix>"</valuePrefix>
      <valueSuffix>"</valueSuffix>
      <delimiter> OR </delimiter>
      <fieldForLabel>CVE</fieldForLabel>
      <fieldForValue>CVE</fieldForValue>
      <search ref="aaaaa_cves"></search>
    </input>
    <input type="text" token="vendor_ref">
      <label>Vendor Reference</label>
      <default>*</default>
    </input>
  </fieldset>
  <row>
    <panel>
      <table>
        <search>
          <query>| inputlookup kb_lookup 
| eval CVE=split(CVE, ", ") 
| mvexpand CVE 
| eval VENDOR_REFERENCE=split(VENDOR_REFERENCE, ", ") 
| mvexpand VENDOR_REFERENCE 
| search QID=$qid_text$ CVE=$cve_id$ VENDOR_REFERENCE=$vendor_ref$
| stats list(QID) AS "ID", list(TITLE) AS "Vuln. description", list(CVE) AS "CVE ID", list(SEVERITY) AS "Severity", list(CVSS_BASE) AS "CVSS Base", list(CVSS_TEMPORAL) AS "CVSS Temporal", list(VENDOR_REFERENCE) AS "Vendor Reference"</query>
          <earliest>-1h@h</earliest>
          <latest>now</latest>
          <sampleRatio>1</sampleRatio>
        </search>
        <option name="count">100</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">cell</option>
        <option name="percentagesRow">false</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
      </table>
    </panel>
  </row>
</form>

And the report query:

 | inputlookup kb_lookup 
 | makemv delim="," CVE
 | mvexpand CVE 
 | rex field=CVE mode=sed "s/^[\r\n\s]+// s/[\r\n\s]+$//"
 | search CVE= "*" 
 | dedup CVE 
 | sort 0 - CVE 
 | fields CVE

It is set to run over all time on Monday at 8 AM.

Any suggestions? I can't figure it out for the life of me.

[marcolesh]

This seems to be a problem related to the number of elements that populate the multiselect. In order to make it smoothly, you could try to add some filters in order to get less data into the multiselect element.

[adonio]

how many results are populating the multiselect?