Getting Data In

Search fields not updating on token set

jdcain
Engager

I am attempting to set a token via a drilldown in a simple xml dashboard as a way to filter a table.

    <input type="dropdown" token="batchId" searchWhenChanged="true">
      <label>BatchId</label>
      <fieldForLabel>BatchId</fieldForLabel>
      <fieldForValue>BatchId</fieldForValue>
      <search base="base">
        <query>| dedup BatchId | sort BatchId</query>
      </search>
      <choice value="*">All</choice>
      <default>*</default>
      <initialValue>*</initialValue>
    </input>

...

 <drilldown>
          <condition field="BatchId">
            <set token="batchId">$click.value2$</set>
          </condition>
 </drilldown>

Clicking the field does filter the table when the token is set but the dropdown box does not reflect the token change to indicate to the user that a filter is active.

I found this question pasted below but it also does not update the field until refresh, and then as a side effect of setting the token as the default the clear X no longer works to change the filter back to *.
https://answers.splunk.com/answers/462005/how-to-update-input-text-fields-when-tokens-are-ch.html

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...