Splunk Enterprise

Why do some dropdowns (classic) have a filter box, and others do not?

genesiusj
Builder

Hello,

Why do some dropdowns have a filter box and others don't?

Are there options on the <input type="dropdown"...> tag that needs to be set?

What other options are available for dropdowns?

Thanks and God bless,
Genesius

Labels (1)
Tags (3)
0 Karma

bowesmana
SplunkTrust
SplunkTrust

The ones with an input box are most likely multiselect dropdowns, where you can select more than one option from the dropdown, whereas standard dropdown has no filter.

0 Karma

genesiusj
Builder

TY @bowesmana 

That is not the case. The searches for both dropdowns are the same inputlookup* file; one dropdown is one field, and the other is the other. But only one of the dropdowns has the filter box. 

Screenshot - 3_21_2023 , 7_48_06 AM.pngScreenshot - 3_21_2023 , 7_47_49 AM.png

*Have to use inputlookup and not index because data is originating from dbconnect.

The second dropdown (displays the filter box) is text. The first dropdown is a number (no filter box displayed). I converted to a string (added AAA in front of the number), but this did not work either.

Each dropdown search includes one of these
| search fieldA=$fieldA_from_other_dropdown$
| search fieldB=$fieldB_from_other_dropdown$

I also tried reversing the order of the dropdowns in the dashboard. But this did not fix the issue.

Thanks for any guidance you can provide.

God bless,
Genesius

0 Karma

bowesmana
SplunkTrust
SplunkTrust

Then it's this setting in the input

<allowCustomValues>true</allowCustomValues>
0 Karma
Get Updates on the Splunk Community!

Introducing a Smarter Way to Discover Apps on Splunkbase

We’re excited to announce the launch of a foundational enhancement to Splunkbase: App Tiering.  Because we’ve ...

How to Send Splunk Observability Alerts to Webex teams in Minutes

As a Developer Evangelist at Splunk, my team and I are constantly tinkering with technology to explore its ...

.conf25 Registration is OPEN!

Ready. Set. Splunk! Your favorite Splunk user event is back and better than ever. Get ready for more technical ...