How to select all checkboxes in a form input by de...

mclane1 · ‎05-11-2016

Hello,

I would like to know how select by default all checkboxes in input like this:

<input type="checkbox" token="hosts" searchWhenChanged="true" depends="somethig">
  <label>host filter</label>
  <search>
    <query>* myFilter...
      | stats by host 
      | table host 
      | sort host</query>
    <earliest>$time_tok.earliest$</earliest>
    <latest>$time_tok.latest$</latest>
  </search>
  <fieldForLabel>hosts</fieldForLabel>
  <fieldForValue>host</fieldForValue>
  <prefix>(</prefix>
  <valuePrefix>LIKE(host,"</valuePrefix>
  <valueSuffix>")</valueSuffix>
  <delimiter> OR </delimiter>
  <suffix>)</suffix>
</input>

I found that but, not friendly usage for client.

<input type="checkbox" token="hosts" searchWhenChanged="true" depends="somethig">
  <label>host filter</label>
  <search>
    <query>* myFilter...
      | stats by host 
      | table host 
      | sort host</query>
    <earliest>$time_tok.earliest$</earliest>
    <latest>$time_tok.latest$</latest>
  </search>
  <fieldForLabel>hosts</fieldForLabel>
  <fieldForValue>host</fieldForValue>
  <default>%</default>
  <choice value="%">All</choice>
  <prefix>(</prefix>
  <valuePrefix>LIKE(host,"</valuePrefix>
  <valueSuffix>")</valueSuffix>
  <delimiter> OR </delimiter>
  <suffix>)</suffix>
</input>

For this result :

cb_usps · ‎05-11-2016

In it's simplest form, you use a comma separated list:

<input type="checkbox" token="field1">
  . . .
  <initialValue>a,b,c</initialValue>
</input>

In your case where you have a dynamically generated list, unless your host list does not change often, the only choice you have is to call the URL of the form with the checklist pre-populated, e.g.

http://your_host:8000/en-US/app/your_app_name/your_dashboard_name?form.hosts=host1&form.hosts=host2&...

I do this myself (with subsets of my entire host list), but I use multiselect instead of checkboxes - not sure if the URL syntax is the same or not. Here's how I build the URL dynamically:

<panel>
  <html>
    <div> <a href="your_dashboard_name?form.hosts=$hosts$" target="_blank">Name of URL in First Dashboard</a> </div>
  </html>
</panel>

The $hosts$ token in this code block is the token name of the multiselect in the first dashboard.

NOUMSSI · ‎05-11-2016

Hi;
Try this

 <input type="checkbox" token="hosts" searchWhenChanged="true" depends="somethig">
   <label>host filter</label>
   <search>
     <query>* myFilter...
       | stats by host 
       | table host 
       | sort host</query>
     <earliest>$time_tok.earliest$</earliest>
     <latest>$time_tok.latest$</latest>
   </search>
   <fieldForLabel>host</fieldForLabel>
   <fieldForValue>host</fieldForValue>
   <default></default>
   <choice value="*">All</choice>
   <prefix>(</prefix>
   <valuePrefix>host="</valuePrefix>
   <valueSuffix>")</valueSuffix>
   <delimiter> OR </delimiter>
   <suffix>)</suffix>
 </input>

mclane1 · ‎05-12-2016

Hello,

Thanks for this post. I have seen this solution (my post) but not user friendly.
I don't want other checkbox, just all checkbox unknown checked.

Thanks

Not possible ? End user just would like to unckeck box.

How to select all checkboxes in a form input by default?

Enterprise Security Content Update (ESCU) | New Releases

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

Index This | What are the 12 Days of Splunk-mas?