Dashboard Classic Dropdown text length limit

[dmoberg]

I have a drop-down in my Classic Dashboard that is populating from an inputlookup.

Looks like this:

<input type="dropdown" token="_ApiID" searchWhenChanged="false">
<label>API ID</label>
<fieldForLabel>APIIDLBL</fieldForLabel>
<fieldForValue>APIID</fieldForValue>
<search>
<query>| inputlookup XXXXXXXXXX | dedup APIID,APIIDLBL | stats count by APIID,APIIDLBL | sort APIID,APIIDLBL | fields APIIDLBL,APIID</query>
<earliest>$timerange.earliest$</earliest>
<latest>$timerange.latest$</latest>
</search>
<choice value="*">All API IDs</choice>
<choice value="NotMeantToBeFound">Select API</choice>
<change>
<set token="OperationID">*</set>
<set token="form.OperationID">*</set>
<set token="ProductID">*</set>
<set token="form.ProductID">*</set>
<set token="sourceregionselector">*</set>
<set token="form.sourceregionselector">*</set>
</change>
<initialValue>NotMeantToBeFound</initialValue>
<default>NotMeantToBeFound</default>
</input>

For the above I get an error message below the drop-down stating: "Duplicate values causing conflict", however there are no Duplicates in the list.

This made me think that Splunk is only looking at the first Y number of chars of the value to determine if there are any duplicates. To test this I extracted the first 20 chars of each value and removed duplicates, as per this:

<query>| inputlookup XXXXXXXXXX | dedup APIID,APIIDLBL | stats count by APIID,APIIDLBL | sort APIID,APIIDLBL | fields APIIDLBL,APIID | eval APIIDLBL=substr(APIIDLBL,1,20) | dedup APIIDLBL</query>

This did indeed resolve my issue and no longer see an error message, but this is obviously not a fix since I then can't see the full values.

Any ideas on how to solve it? I would take this is a bug........

[ITWhisperer]

Deduping by two fields does not guaranteed uniqueness in either field, you should just dedup by APIID, as this is the field being used for the value, which is the one which needs to have unique values in.

[gcusello · Accepted solution]

Hi @dmoberg ,

in your search, you are deduping by APIID and APIIDLBL, but you must declare only one field in fieldForLabel, so probably you have duplicated values for this field (APIIDLBL ).

Ciao.

Giuseppe

[dmoberg]

Awesome. It works now!