How do I get unique values in form dropdown?

[oriches]

I want the list in the dropdown to be unique values in a form.

What do I have to put in the 'populatingSearch' element to make sure every value is unique?

[bwooden · Accepted solution]

Let's say your're populating the dropdown with hosts, you can dedup a few ways in Splunk.

One way would be to dedup the field host:

... | dedup host

Another would be to use stats

... | stats values(host) as host

I generally use the dedup command in this situation: http://docs.splunk.com/Documentation/Splunk/5.0.3/SearchReference/Dedup

[oriches]

I got it to work with the following 'host | dedup host'

[oriches]

I tried '| dedup host' but it returned nothing...