Getting Data In

Add hosts to Splunk multiselect UI

kirti_gupta12
Path Finder

I want to populate the list of hosts in the multiselect input option in Splunk.

index=someIndexName * host!="notThis*" | stats values(host) as host

I can see the list of hosts getting populated in Splunk. However, they are not getting populated in multiselect list. It says "populating" and nothing shows up.

0 Karma
1 Solution

vnravikumar
Champion

Hi

Try like below

<form>
  <label>multiselect</label>
  <fieldset submitButton="false">
    <input type="multiselect" token="field1">
      <label>field1</label>
      <fieldForLabel>host</fieldForLabel>
      <fieldForValue>host</fieldForValue>
      <search>
        <query>index=_internal 
| stats count by host</query>
      </search>
    </input>
  </fieldset>
</form>

View solution in original post

vnravikumar
Champion

Hi

Try like below

<form>
  <label>multiselect</label>
  <fieldset submitButton="false">
    <input type="multiselect" token="field1">
      <label>field1</label>
      <fieldForLabel>host</fieldForLabel>
      <fieldForValue>host</fieldForValue>
      <search>
        <query>index=_internal 
| stats count by host</query>
      </search>
    </input>
  </fieldset>
</form>
Get Updates on the Splunk Community!

Enhance Your Splunk App Development: New Tools & Support

UCC FrameworkAdd-on Builder has been around for quite some time. It helps build Splunk apps faster, but it ...

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...