Getting Data In

How do I get unique values in form dropdown?

oriches
Explorer

I want the list in the dropdown to be unique values in a form.

What do I have to put in the 'populatingSearch' element to make sure every value is unique?

Tags (2)
0 Karma
1 Solution

bwooden
Splunk Employee
Splunk Employee

Let's say your're populating the dropdown with hosts, you can dedup a few ways in Splunk.

One way would be to dedup the field host:

... | dedup host

Another would be to use stats

... | stats values(host) as host

I generally use the dedup command in this situation: http://docs.splunk.com/Documentation/Splunk/5.0.3/SearchReference/Dedup

View solution in original post

0 Karma

bwooden
Splunk Employee
Splunk Employee

Let's say your're populating the dropdown with hosts, you can dedup a few ways in Splunk.

One way would be to dedup the field host:

... | dedup host

Another would be to use stats

... | stats values(host) as host

I generally use the dedup command in this situation: http://docs.splunk.com/Documentation/Splunk/5.0.3/SearchReference/Dedup

0 Karma

oriches
Explorer

I got it to work with the following 'host | dedup host'

0 Karma

oriches
Explorer

I tried '| dedup host' but it returned nothing...

0 Karma
Get Updates on the Splunk Community!

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

  Now On Demand  Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research ...

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...