Splunk Search

HTML Drop-down Search not populating

New Member

I have a KVstore and created a drop-down input filter. I can't seem to get it to filter my data. The drop-down lists all the correct data, but I can't seem to filter out information.

For example:

Sample Statistics Table has the fields: NAME, ID, FavoriteColor

Data/Inputs in the collection:
Abby, 01, Blue
Bill, 02, Green
Chris, 03, Purple

My drop-down is searching based on the ID. So when I click my drop-down, it lists: 01,02,03. However, if I select 03, it does nothing. Same with all other IDs. Is there something I'm missing?

I want to be able to list all data based on the ID, even if there are duplicates. For example:
Abby, 01, Blue
Bill, 02, Green
Chris, 03, Purple
Daniella, 03, Black

If I search on all IDs with 03, I'll get:
Chris, 03, Purple
Daniella, 03, Black

0 Karma

SplunkTrust
SplunkTrust

Can you share your search which is used to get data from the KV store ? For eg: if my drop down token is id_token, then the search will be

|inputlookup my_lookup where ID=$id_token$

More read : http://dev.splunk.com/view/SP-CAAAEZH

0 Karma