We have the following -
<input type="dropdown" token="Status" searchWhenChanged="false">
<label>Job Status</label>
<choice value="*">ALL</choice>
<choice value="SUCCESS">SUCCESS</choice>
<choice value="FAILURE">FAILURE</choice>
<choice value="RUNNING">RUNNING</choice>
<default>*</default>
<initialValue>*</initialValue>
</input>
In the code the following works just fine -
| where STATUS = "$Status$"
Except for the ALL token as the code would be -
| where STATUS = "*"
Instead of -
| where STATUS = *
What can be done?
Your issue is not really with the dropdown, it is with the where command
| where STATUS = "*"
would not find all events with any value for status.
Either use
| search STATUS = "$Status$"
Or change the dropdown to
<input type="dropdown" token="Status" searchWhenChanged="false">
<label>Job Status</label>
<choice value=".*">ALL</choice>
<choice value="SUCCESS">SUCCESS</choice>
<choice value="FAILURE">FAILURE</choice>
<choice value="RUNNING">RUNNING</choice>
<default>.*</default>
<initialValue>.*</initialValue>
</input>
and use
| where match(STATUS, "$Status$")