Why is the selected token value in my drop-down not being used in the main search, and how can I create an option to select all values?

[gyslainlatsa]

Hello,

Here is the code that allows me to display my view:

     <view autoCancelInterval="90" isVisible="true" objectMode="SimpleForm" onunloadCancelJobs="true" template="dashboard.html">
       <label>Application_Domain</label>
       <module name="AccountBar" layoutPanel="appHeader"/>
       <module name="AppBar" layoutPanel="navigationHeader"/>
       <module name="Message" layoutPanel="messaging">
         <param name="filter">*</param>
         <param name="clearOnJobDispatch">False</param>
         <param name="maxSize">1</param>
       </module>
       <module name="Message" layoutPanel="messaging">
         <param name="filter">splunk.search.job</param>
         <param name="clearOnJobDispatch">True</param>
         <param name="maxSize">1</param>
       </module>
       <module name="TitleBar" layoutPanel="viewHeader">
         <param name="actionsMenuFilter">dashboard</param>
       </module>

       <module name="ServerSideInclude" layoutPanel="panel_row1_col1">
         <param name="src">/applications.html</param>
       </module>

      <module name="HiddenSearch" layoutPanel="panel_row2_col1" autoRun="false">    
       <module name="SearchSelectLister" layoutPanel="panel_row2_col1">
         <param name="settingToCreate">domain_setting</param>
         <param name="label">Select Domain</param>
         <param name="search">index=websphere |rex field=_raw "\[(?<Domain>\S+)\]\[\S+\]\[\S+\]\[\S+\]" |stats count by Domain  
         </param>
         <param name="staticFieldsToDisplay"/>
         <param name="searchFieldsToDisplay">
           <list>
             <param name="value">Domain</param>
             <param name="label">Domain</param>
           </list>
         </param>
         <param name="searchWhenChanged">False</param>
         <module name="ConvertToIntention">
           <param name="intention">
             <param name="arg">
               <param name="sourcetype">
                 <param name="value">$target$</param>
                 <param name="fillOnEmpty">True</param>
               </param>
             </param>
             <param name="name">stringreplace</param>
           </param>
           <param name="settingToConvert">domain_setting</param>
           <module name="SubmitButton">
             <param name="allowSoftSubmit">True</param>
             <param name="visible">True</param>
             <param name="label">Search</param>
             <param name="updatePermalink">True</param>
             <module name="HiddenSearch" layoutPanel="panel_row2_col1" group="Applications" autoRun="False">
               <param name="groupLabel">Applications</param>
               <param name="search">
             index=websphere |rex field=_raw "\[(?<Domain>\S+)\]\[\S+\]\[\S+\]\[\S+\]" |search Domain=$Domain$ | timechart count
               </param>
               <module name="ViewstateAdapter">
                 <param name="suppressionList">
                   <item>charting.chart</item>
                 </param>
                 <module name="HiddenFieldPicker">
                   <param name="strictMode">True</param>
                   <module name="JobProgressIndicator">
                     <module name="EnablePreview">
                       <param name="enable">True</param>
                       <param name="display">False</param>
                       <module name="HiddenChartFormatter">
                         <param name="charting.chart">column</param>
                         <module name="JSChart">
                           <param name="width">100%</param>
                           <module name="Gimp"/>
                           <module name="ConvertToDrilldownSearch">
                             <module name="ViewRedirector">
                               <param name="viewTarget">flashtimeline</param>
                             </module>
                           </module>
                         </module>
                         <module name="ViewRedirectorLink">
                           <param name="viewTarget">flashtimeline</param>
                         </module>
                       </module>
                     </module>
                   </module>
                 </module>
               </module>
             </module>
           </module>
         </module>
       </module>
      </module>
     </view>

My problem is this:
When I select a value in the drop-down, this value is not recovered in the main search and I'd like to know why? and want to know the technique that I can use to select all values in the drop-down that is to say ALL = * (eg Domain = *).

Any help will be welcome.
Best regards.

[gyslainlatsa · Accepted solution]

Hi everybody,
i could find the solution and thank you to all those who have tried to do so. my solution is:

     <view autoCancelInterval="90" isVisible="true" objectMode="SimpleForm" onunloadCancelJobs="true" template="dashboard.html">
       <label>Application_Domain</label>
       <module name="AccountBar" layoutPanel="appHeader"/>
       <module name="AppBar" layoutPanel="navigationHeader"/>
       <module name="Message" layoutPanel="messaging">
         <param name="filter">*</param>
         <param name="clearOnJobDispatch">False</param>
         <param name="maxSize">1</param>
       </module>
       <module name="Message" layoutPanel="messaging">
         <param name="filter">splunk.search.job</param>
         <param name="clearOnJobDispatch">True</param>
         <param name="maxSize">1</param>
       </module>
       <module name="TitleBar" layoutPanel="viewHeader">
         <param name="actionsMenuFilter">dashboard</param>
       </module>

       <module name="ServerSideInclude" layoutPanel="panel_row1_col1">
         <param name="src">/applications.html</param>
       </module>

      <module name="HiddenSearch" layoutPanel="panel_row2_col1" autoRun="false">    
       <module name="SearchSelectLister" layoutPanel="panel_row2_col1">
         <param name="settingToCreate">domain_setting</param>
         <param name="label">Select Domain</param>
         <param name="search">index=websphere |rex field=_raw "\[(?<Domain>\S+)\]\[\S+\]\[\S+\]\[\S+\]" |stats count by Domain  
         </param>

         <param name="staticFieldsToDisplay">
        <list>
          <param name="value">*</param>
          <param name="label">ALL DOMAINS (*)</param>
        </list>
      </param>
         <param name="searchFieldsToDisplay">
           <list>
             <param name="value">Domain</param>
             <param name="label">Domain</param>
           </list>
         </param>
         <param name="searchWhenChanged">False</param>
         <module name="ConvertToIntention">
           <param name="intention">
             <param name="arg">
               <param name="Domain">
                 <param name="default">ALL DOMAINS (*)</param>
                 <param name="value">$target$</param>
                 <param name="fillOnEmpty">True</param>
               </param>
             </param>
             <param name="name">stringreplace</param>
           </param>
           <param name="settingToConvert">domain_setting</param>
           <module name="SubmitButton">
             <param name="allowSoftSubmit">True</param>
             <param name="visible">True</param>
             <param name="label">Search</param>
             <param name="updatePermalink">True</param>
             <module name="HiddenSearch" layoutPanel="panel_row2_col1" group="Applications" autoRun="False">
               <param name="groupLabel">Applications</param>
               <param name="search">
             index=websphere |rex field=_raw "\[(?<Domain>\S+)\]\[\S+\]\[\S+\]\[\S+\]" |search Domain="$Domain$" | timechart count
               </param>
               <module name="ViewstateAdapter">
                 <param name="suppressionList">
                   <item>charting.chart</item>
                 </param>
                 <module name="HiddenFieldPicker">
                   <param name="strictMode">True</param>
                   <module name="JobProgressIndicator">
                     <module name="EnablePreview">
                       <param name="enable">True</param>
                       <param name="display">False</param>
                       <module name="HiddenChartFormatter">
                         <param name="charting.chart">column</param>
                         <module name="JSChart">
                           <param name="width">100%</param>
                           <module name="Gimp"/>
                           <module name="ConvertToDrilldownSearch">
                             <module name="ViewRedirector">
                               <param name="viewTarget">flashtimeline</param>
                             </module>
                           </module>
                         </module>
                         <module name="ViewRedirectorLink">
                           <param name="viewTarget">flashtimeline</param>
                         </module>
                       </module>
                     </module>
                   </module>
                 </module>
               </module>
             </module>
           </module>
         </module>
       </module>
      </module>
     </view>